mirror of
https://github.com/galaxyproject/galaxy.git
synced 2026-10-16 15:45:04 +08:00
mvdbeek
df2be47bb1
Vault 2.0 rejects KV paths with leading or double slashes that Vault 1.x
silently normalized. VaultKeyPrefixWrapper emitted `/{prefix}/{key}`,
producing `//galaxy/...` on the wire. Strip outer slashes from the
configured prefix and validate it at construction, and fall back to the
legacy double-slash key once on read so pre-upgrade secrets survive,
rewriting under the canonical path.
Integration test pins hashicorp/vault:2.0, passes dev-mode settings via
env vars (the entrypoint duplicates CLI flags), and sets SKIP_SETCAP=1
so the non-root image doesn't abort on cap_ipc_lock.