MON-106121-gorgone-use-vault-autonomous-library

.github/actions/package/action.yml

@@ -116,6 +116,6 @@ runs:
       name: Upload package artifacts
       uses: actions/upload-artifact@0b2256b8c012f0828dc542b3febcab082c67f72b # v4.3.4
       with:
-        name: ${{ inputs.arch != '' && format('packages-{0}-{1}', inputs.distrib, inputs.arch) || format('packages-{0}', inputs.distrib) }}
+        name: ${{ inputs.arch != '' && format('packages-{0}-{1}', inputs.distrib, inputs.arch) || format('packages-{0}', inputs.distrib) }}-${{ inputs.stability }}
         path: ./*.${{ inputs.package_extension}}
         retention-days: 1

.github/workflows/gorgone.yml

@@ -91,13 +91,13 @@ jobs:
         uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
 
       - name: Run unit tests
-        run: yath -L test ./perl-libs/lib/
+        run: yath -L test ./perl-libs/lib/ ./gorgone/tests/unit/
 
       - name: Upload logs as artifacts if tests failed
         if: failure()
         uses: actions/upload-artifact@50769540e7f4bd5e21e526ee35c689e35e0d6874 # v4.4.0
         with:
-          name: plugin-installation-${{ matrix.distrib }}
+          name: centreon-collect-perl-unit-tests-${{ matrix.distrib }}
           path: ./lastlog.jsonl
           retention-days: 1
 
@@ -330,7 +330,7 @@ jobs:
 
   deliver-deb:
     runs-on: [self-hosted, common]
-    needs: [get-environment, package]
+    needs: [get-environment, package, robot-test-gorgone, unit-test-perl]
     if: ${{ contains(fromJson('["testing", "unstable"]'), needs.get-environment.outputs.stability) }}
 
     strategy:

gorgone/docs/configuration.md

@@ -100,6 +100,17 @@ configuration:
       proxy_name: proxy
 ```
 
+## *centreon vault*
+
+Centreon vault is a tool to secure passwords present in the Centreon configuration.\
+It allows to store the password in a vault and retrieve it when needed by each component.\
+Gorgone allow to use a vault to store any string in the configuration. It cannot store an array or an hash.
+
+To use vault, report to the official documentation to set up vault and the configuration file in `/var/lib/centreon/vault/vault.json`\
+Then replace any password present in the gorgone configuration with a vault string. See the official format here : 
+
+https://github.com/centreon/centreon-collect/blob/develop/perl-libs/lib/centreon/common/centreonvault.pm#L391
+
 ## *modules*
 
 See the *configuration* titles of the modules documentations listed [here](../docs/modules.md).

gorgone/gorgone/class/core.pm

@@ -35,7 +35,7 @@ use gorgone::class::listener;
 use gorgone::class::frame;
 use Time::HiRes;
 use Try::Tiny;
-
+use centreon::common::centreonvault;
 my ($gorgone);
 
 use base qw(gorgone::class::script);
@@ -163,10 +163,17 @@ sub init {
         $self->{logger}->writeLogError("[core] can't find config file '$self->{config_file}'");
         exit(1);
     }
+    # before loading the config, we need to load initialize vault.
+    # Gorgone don't know how to reload for now, but once it will be done, we will need to retry the vault connexion if it failed when starting, and read again the configuration
+    $self->{vault_file} = defined($self->{vault_file}) ? $self->{vault_file} : '/var/lib/centreon/vault/vault.json';
+    $self->{vault} = centreon::common::centreonvault->new(logger => $self->{logger},  'config_file' =>  $self->{vault_file});
+
     $self->{config} = $self->yaml_load_config(
-        file => $self->{config_file},
+        file   => $self->{config_file},
+        # the filter is used to remove anything from the configuration not related to gorgone or centreon
         filter => '!($ariane eq "configuration##" || $ariane =~ /^configuration##(?:gorgone|centreon)##/)'
     );
+
     $self->init_server_keys();
 
     $self->{config}->{configuration}->{gorgone}->{gorgonecore}->{external_com_zmq_tcp_keepalive} =