1526 Commits

Author	SHA1	Message	Date
Jeff Mitchell	42d9df95c1	Merge branch 'master-oss' into aws-auth-backend	2016-05-05 10:36:06 -04:00
Jeff Mitchell	98d7f52ef2	Merge remote-tracking branch 'origin/master' into aws-cred-chain	2016-05-05 10:31:12 -04:00
Jeff Mitchell	50e3f7d40e	Merge remote-tracking branch 'origin/master' into aws-auth-backend	2016-05-05 10:04:52 -04:00
vishalnayak	0481976696	Split SanitizeTTL method to support time.Duration parameters as well	2016-05-05 09:45:48 -04:00
vishalnayak	a74332bb7e	Add the steps to generate the CRL test's test-fixture files	2016-05-04 05:48:34 -04:00
vishalnayak	ef83605f58	Change image/ to a more flexible /role endpoint	2016-05-03 23:36:59 -04:00
Jeff Mitchell	88811a4776	Cleanups, add shared provider, ability to specify http client, and port S3 physical backend over	2016-05-03 17:01:02 -04:00
Jeff Mitchell	56cc74887f	Region is required so error in awsutil if not set and set if empty in client code in logical/aws	2016-05-03 15:25:11 -04:00
Jeff Mitchell	56011c9443	Refactor AWS credential code into a function that returns a static->env->instance chain	2016-05-03 15:10:35 -04:00
Jeff Mitchell	d3f1176e03	Switch our tri-copy ca loading code to go-rootcerts	2016-05-03 12:23:25 -04:00
Jeff Mitchell	e48cb2e840	Add some more tests around deletion and fix upsert status returning	2016-05-03 00:19:18 -04:00
Jeff Mitchell	027d570f7f	Massively simplify lock handling based on feedback	2016-05-02 23:47:18 -04:00
Jeff Mitchell	bf7ad912e1	Remove some deferring	2016-05-02 22:36:44 -04:00
Jeff Mitchell	16267d5115	Change use-hint of lockAll and lockPolicy	2016-05-02 22:36:44 -04:00
Jeff Mitchell	5ec40a14f4	Address review feedback	2016-05-02 22:36:44 -04:00
Jeff Mitchell	c598a12ab9	Switch to lockManager	2016-05-02 22:36:44 -04:00
Jeff Mitchell	3ab71ca239	Address feedback	2016-05-02 22:36:44 -04:00
Jeff Mitchell	634cea72d7	Fix up commenting and some minor tidbits	2016-05-02 22:36:44 -04:00
Jeff Mitchell	32601f4424	Make a non-caching but still locking variant of transit for when caches are disabled	2016-05-02 22:36:44 -04:00
vishalnayak	7945e4668a	Allow custom endpoint URLs to be supplied to make EC2 API calls	2016-05-02 17:21:52 -04:00
vishalnayak	e032f9144c	Extend the expiry of test-fixture certs of Cert backend	2016-05-02 12:34:46 -04:00
Jeff Mitchell	e198037788	Make GitHub org comparison case insensitive. ... Fixes #1359	2016-05-02 00:18:31 -04:00
vishalnayak	57e6361b24	Remove unnecessary append call	2016-04-30 03:20:21 -04:00
vishalnayak	bbb3efdc67	Cert backend, CRL tests	2016-04-29 02:32:48 -04:00
vishalnayak	fed55cff94	Ensure that the instance is running during renewal	2016-04-28 16:34:35 -04:00
vishalnayak	0b44a62e8f	Added allow_instance_migration to the role tag	2016-04-28 11:43:48 -04:00
vishalnayak	1a3c0a1f3e	Change all time references to UTC	2016-04-28 10:19:29 -04:00
vishalnayak	ba88b210e6	Fix the deadlock issue	2016-04-28 01:01:33 -04:00
vishalnayak	05c10dad94	minor updates	2016-04-28 00:35:49 -04:00
vishalnayak	ba62ef6a86	Refactor locks around config tidy endpoints	2016-04-27 22:32:43 -04:00
vishalnayak	c7bfdd7ed0	Fix locking around config/client	2016-04-27 22:25:15 -04:00
vishalnayak	0b561d668b	Fix the list response of role tags	2016-04-27 22:03:11 -04:00
vishalnayak	329361f951	Removed existence check on blacklist/roletags, docs fixes	2016-04-27 21:29:32 -04:00
vishalnayak	aae439b947	Remove unnecessary lock switching around flushCachedEC2Clients	2016-04-27 20:13:56 -04:00
vishalnayak	36193850fd	Remove recreate parameter from clientEC2	2016-04-27 20:01:39 -04:00
vishalnayak	70ea33ccfc	Added ami_id to token metadata	2016-04-27 11:32:05 -04:00
leon	7caa667fef	- updated refactored functions in ldap backend to return error instead of ldap response and fixed interrupted search in ldap groups search func	2016-04-27 18:17:54 +03:00
leon	df7723bb38	- refactored functionality in separate functions in ldap backend and used a separate ldap query to get ldap groups from userDN	2016-04-27 15:00:26 +03:00
vishalnayak	7e821db4f0	Added tests	2016-04-26 23:40:11 -04:00
vishalnayak	9f06bb2cea	Added tests	2016-04-26 10:22:29 -04:00
vishalnayak	3ee386ecb4	Added tests	2016-04-26 10:22:29 -04:00
vishalnayak	b05042ff2d	Added tests	2016-04-26 10:22:29 -04:00
vishalnayak	2582e5d0ee	Added tests	2016-04-26 10:22:29 -04:00
vishalnayak	06a174c2f0	tidy endpoint fixes	2016-04-26 10:22:29 -04:00
vishalnayak	dd03c55d68	HMAC Key per AMI ID and avoided secondary call to AWS to fetch the tags	2016-04-26 10:22:29 -04:00
vishalnayak	3110f65834	Rework and refactoring	2016-04-26 10:22:29 -04:00
vishalnayak	23a2bc76a5	Added mutex locking for config/certificate endpoint	2016-04-26 10:22:29 -04:00
vishalnayak	4f46bbaa32	Added cooldown period for periodic tidying operation	2016-04-26 10:22:29 -04:00
vishalnayak	81e4235fc0	Support periodic tidy callback and config endpoints.	2016-04-26 10:22:29 -04:00
vishalnayak	b76a4df110	Use fullsailor/pkcs7 package instead of its fork. Fix tests	2016-04-26 10:22:29 -04:00