11849 Commits

Author SHA1 Message Date
Noelle Daley
fc58f669e8
Update CHANGELOG.md 2019-12-13 15:26:12 -08:00
Noelle Daley
c5efd226ed
Ui/fix demoting status menu (#7997)
* fix bug where users couldn't click on update primary

* don't show status menu items when cluster isSecondary since those links don't work

* show the mode of replication in the status menu

* do not show server header in status menu when the contents are empty

* show Disaster Recovery instead of 'DR'

* do not show http metrics in status menu unless user is authenticated

* fix typo so icons in status menu show
2019-12-13 15:23:17 -08:00
Jim Kalafut
dd2fe725fc
changelog++ 2019-12-13 11:21:19 -08:00
Michael Golowka OR 1=1); DROP TABLE users; --
abeb24c113
Split helm docs to multiple pages under Helm Chart (#8011)
* Split helm docs to multiple pages under Helm Chart

- Fixed some minor formatting typos
- Added a note at the beginning of most of the pages indicating
incompatibility with helm 3

* Remove duplicate examples
2019-12-13 12:09:34 -07:00
Jeff Mitchell
bfb63d7220 changelog++ 2019-12-12 14:41:51 -05:00
Jeff Mitchell
cee00b4445 changelog++ 2019-12-12 14:41:09 -05:00
Jim Kalafut
3712dfa32e
changelog++ 2019-12-11 14:09:54 -08:00
Becca Petrin
92febcd203
add sts_region to aws auth api docs (#8001) 2019-12-11 13:45:39 -08:00
ncabatoff
03e61fc368
Update KMIP docs re supported operations. (#8008) 2019-12-11 16:22:25 -05:00
Michel Vocks
e1b6971e1c Add accept header check for prometheus mime type (#7958)
* Add accept header check for prometheus mime type

* Fix small header filter bug. Add test
2019-12-11 11:59:19 -08:00
Becca Petrin
73fd8f314f
Add Kerberos SPNEGO auth plugin (#7908) 2019-12-11 11:18:37 -08:00
Becca Petrin
f259edcceb
Kerberos docs (#7993) 2019-12-11 11:16:36 -08:00
chrismatteson
921f5efed4 Removed typo space (#8007) 2019-12-11 11:01:28 -08:00
catsby
e523f1feec
remove redundant check and clarify code comment 2019-12-11 10:16:09 -06:00
Clint
3b4313095b
Changelog++ 2019-12-11 09:33:39 -06:00
Clint
3f62e7f30b
Transit: error when restoring to a name that looks like a path (#7998)
* Add test to verify #7663

* Validate name in transit key restore to not be a path
2019-12-11 09:32:22 -06:00
ncabatoff
dd3dcd7069
Handle otherName SANs in CSRs (#6163)
If a CSR contains a SAN of type otherName, encoded in UTF-8, and the signing role specifies use_csr_sans, the otherName SAN will be included in the signed cert's SAN extension.

Allow single star in allowed_other_sans to match any OtherName.  Update documentation to clarify globbing behaviour.
2019-12-11 10:16:44 -05:00
Becca Petrin
6b2d5ac3dc
Add an sts_region parameter to the AWS auth engine's client config (#7922) 2019-12-10 16:02:04 -08:00
Calvin Leung Huang
ab0be03486
changelog++ 2019-12-10 10:53:41 -08:00
Calvin Leung Huang
8d0b7b150c
plugin: fix panic on router.MatchingSystemView if backend is nil (#7991)
* plugin: fix panic on router.MatchingSystemView if backend is nil

* correctly determine the plugin binary file in the directory

* docs: simplify plugin file removal
2019-12-10 10:48:30 -08:00
Calvin Leung Huang
a3af0e476f
docs: add section on upgrading plugins (#7984)
* docs: add section on upgrading plugins

* docs: move plugin upgrade to its own guides page

* docs: reword step 4

* docs: add page to sidebar
2019-12-10 10:15:01 -08:00
Clint
805a0bc9b4 revert a change introduced 13dbb3aac (#7979) 2019-12-07 18:01:11 -08:00
Jeff Mitchell
412751ba50 changelog++ 2019-12-06 16:17:22 -05:00
Steve Wills
13dbb3aac3 Fix UI build in fresh repo (#7865)
Fixes #7863
2019-12-06 12:58:40 -06:00
Chris Hoffman
a1a407f76b
changelog++ 2019-12-06 12:24:03 -05:00
Chris Hoffman
5c68d61aa5
changelog++ 2019-12-06 12:18:26 -05:00
Mike Jarmy
df01a4307d
Introduce optional service_registration stanza (#7887)
* move ServiceDiscovery into methods

* add ServiceDiscoveryFactory

* add serviceDiscovery field to vault.Core

* refactor ConsulServiceDiscovery into separate struct

* cleanup

* revert accidental change to go.mod

* cleanup

* get rid of un-needed struct tags in vault.CoreConfig

* add service_discovery parser

* add ServiceDiscovery to config

* cleanup

* cleanup

* add test for ConfigServiceDiscovery to Core

* unit testing for config service_discovery stanza

* cleanup

* get rid of un-needed redirect_addr stuff in service_discovery stanza

* improve test suite

* cleanup

* clean up test a bit

* create docs for service_discovery

* check if service_discovery is configured, but storage does not support HA

* tinker with test

* tinker with test

* tweak docs

* move ServiceDiscovery into its own package

* tweak a variable name

* fix comment

* rename service_discovery to service_registration

* tweak service_registration config

* Revert "tweak service_registration config"

This reverts commit 5509920a8ab4c5a216468f262fc07c98121dce35.

* simplify naming

* refactor into ./serviceregistration/consul
2019-12-06 09:46:39 -05:00
Jason O'Donnell
47cffd09f9 Add int64 pointerutil (#7973) 2019-12-05 14:02:36 -08:00
Chris Hoffman
1645b20127
if storing the certificate, always generate/sign the certificate on the primary (#7904) 2019-12-05 13:50:28 -05:00
Jim Kalafut
fd1542d048
changelog++ 2019-12-04 06:21:46 -08:00
Jim Kalafut
55bba5537c
Fix S3 configurable path handling (#7966)
Also remove some incorrect skipping of the S3 test.

Fixes #7362
2019-12-04 06:18:45 -08:00
Steve Gore
967b8c96f7 Fix "does not exists" grammar (#7950)
* Fix "does not exists" grammar

* Fix "does not exists" grammar

* Revert vendor and go.mod
2019-12-03 16:25:09 -06:00
Clint
a4d0ca8e6d
Update CHANGELOG.md 2019-12-03 15:50:38 -06:00
Colton J. McCurdy
82786f8278 physical/posgresql: add ability to prefer VAULT_PG_CONNECTION_URL envar over config file (#7937)
* physical/posgresql: add ability to use CONNECTION_URL environment variable instead of requiring it to be configured in the Vault config file.

Signed-off-by: Colton McCurdy <mccurdyc22@gmail.com>

* storage/postgresql: update configuration documentation for postgresql storage backend to include connection_url configuration via the PG_CONNECTION_URL environment variable

Signed-off-by: Colton McCurdy <mccurdyc22@gmail.com>

* physical/postgresql: add a configuration file and tests for getting the connection_url from the config file or environment

Signed-off-by: Colton McCurdy <mccurdyc22@gmail.com>

* physical/postgresql: update postgresql backend to pull the required connection_url from the PG_CONNECTION_URL environment variable if it exists, otherwise, fallback to using the config file

Signed-off-by: Colton McCurdy <mccurdyc22@gmail.com>

* physical/postgresql: remove configure*.go files and prefer the postgresql*.go files

Signed-off-by: Colton McCurdy <mccurdyc22@gmail.com>

* physical/postgresql: move and simplify connectionURL function

Signed-off-by: Colton McCurdy <mccurdyc22@gmail.com>

* physical/postgresql: update connectionURL test to use an unordered map instead of slice to avoid test flakiness

Signed-off-by: Colton McCurdy <mccurdyc22@gmail.com>

* physical/postgresql: update config env to be prefixed with VAULT_ - VAULT_PG_CONNECTION_URL

Signed-off-by: Colton McCurdy <mccurdyc22@gmail.com>

* docs/web: update postgresql backend docs to use updated, VAULT_ prefixed config env

Signed-off-by: Colton McCurdy <mccurdyc22@gmail.com>
2019-12-03 15:48:38 -06:00
Jim Kalafut
15d3186380
changelog++ 2019-12-02 14:48:10 -08:00
Clint
3649a1ee2a
physical/postgresql: Refactor test code to avoid panic if tests ran multiple times (#7939)
* refactor test code to avoid panic if tests ran multiple times

* cleanup: don't actually send just close

* move comment to a better location

* move error check to a more obvious spot

* Revert "move error check to a more obvious spot"

Reverting because methods like this should only be called on the main
goroutine running the test:

- https://golang.org/pkg/testing/#T

This reverts commit db7641948317785bff15b3d9dbe6fb18a2d19c2c.
2019-12-02 15:05:02 -06:00
Jason O'Donnell
4acd3dd987
doc: update helm doc to include init/unseal (#7955)
* doc: update helm doc to include init/unseal

* Update website/source/docs/platform/k8s/run.html.md

Co-Authored-By: Clint <catsby@users.noreply.github.com>

* Update website/source/docs/platform/k8s/run.html.md

Co-Authored-By: Clint <catsby@users.noreply.github.com>

* Clarify vault helm default note
2019-12-02 15:51:51 -05:00
Brian Shumate
357f5f7a0c Docs: Update Telemetry (#7959)
- Add wal_loadWAL metric
- Create section for Merkle Tree and WAL metrics
- Remove trailing spaces
2019-12-02 10:55:59 -08:00
Clint
cf319a6193 Remove response code info from non-overview API docs (contd) (#7940)
Continues https://github.com/hashicorp/vault/pull/6459 and cleans up
some spots that should have been deleted, but due to markdown
formatting, weren't rendering anyway.

> Remove response code info from non-overview API docs as it can be
> misinterpreted and is always the same anyways.
2019-12-02 10:07:46 -08:00
Peter Souter
fa0f459f9b Adds new Entropy Augmentation feature (#7935) 2019-12-02 10:04:05 -08:00
Lars Lehtonen
d1b6676043 vault: fix dropped error in TestTokenStore_HandleRequest_CreateToken_NotAllowedEntityAlias(). (#7934) 2019-12-02 10:03:24 -08:00
Michel Vocks
15b1c2fe85
Docs: Add enable_hostname_label (#7956) 2019-12-02 17:51:02 +01:00
Anoop Vijayan Maniankara
4fbf1f41dc Typo fix, getting started guide link (#7954)
The url does not exist, the correct one is updated.
install.html -> index.html
2019-12-02 09:43:15 +01:00
Michel Vocks
f0ff4c9e4f
Add enable_hostname_label option to telementry stanza (#7902) 2019-12-02 09:26:46 +01:00
catsby
3ffc0cd03e
fix website formatting 2019-11-26 17:02:10 -06:00
Yong Wen Chua
4f81656a0c Add new fields to K8S Auth Documentation (#7509)
- Added in https://github.com/hashicorp/vault-plugin-auth-kubernetes/pull/70
2019-11-26 16:48:30 -06:00
Andrea Scarpino
6c08800675 Fix typo in the documentation (#7938) 2019-11-26 15:57:51 -06:00
Calvin Leung Huang
b9d03ca99e
agent/template: give more time for test to poll on directory before f… (#7872)
* agent/template: give more time for test to poll on directory before failing

* refactor timeout bit
2019-11-25 09:07:38 -08:00
Calvin Leung Huang
a68fde98e8
command: fix namespace list help text (#7890) 2019-11-25 08:57:32 -08:00
Brian Shumate
5293ce7cfc Docs: Secrets engines: KMIP (#7932)
- Streamline flow of introductory paragraph
- Grammar edits
- Remove trailing space
2019-11-25 11:56:08 -05:00