feat(kms): bound backend concurrency and failures (#5651)

This commit is contained in:
Zhengchao An
2026-08-03 02:24:26 +08:00
committed by GitHub
parent 2ce670837c
commit fbb6cebeb4
10 changed files with 1212 additions and 57 deletions
+14 -2
View File
@@ -452,12 +452,24 @@ impl VaultRestoreClient {
attempt_timeout: kms_config.effective_timeout(),
};
let source = token_source_for(&target.auth_method, &settings)?;
let policy = VaultCredentialPolicy::from_kms_config(kms_config, &target.auth_method);
let policy = VaultCredentialPolicy::from_kms_config(
kms_config,
&target.auth_method,
"vault-restore",
&target.address,
target.namespace.as_deref(),
);
let credentials = Arc::new(VaultCredentialProvider::new(settings, source, policy).await?);
Ok(Self {
credentials,
kv_mount: target.kv_mount.clone(),
retry: RetryPolicy::from_config(kms_config),
retry: RetryPolicy::for_backend(
kms_config,
"vault-restore",
&target.address,
target.namespace.as_deref(),
"operations",
),
cancel: CancellationToken::new(),
})
}