7782 Commits

Author SHA1 Message Date
Jeff Mitchell
58157726a2 Bump readme go requirement 2017-09-01 08:36:05 -04:00
Eugene Bekker
176bf9305a Fixing the response sample for reading a plugin (#3278)
The plugin config data properties are returned immediately within the response's `data` object.
2017-09-01 08:34:54 -04:00
Jeff Mitchell
acb944635c Massive update to response-wrapping concept page 2017-09-01 08:32:55 -04:00
Brian Kassouf
4b80f4b58e Plugin Version Update (#3275)
* Bump plugin version requirement

* Register time.Duration with gob
2017-09-01 00:01:14 -07:00
Calvin Leung Huang
3b8b68097d Lazy-load plugin mounts (#3255)
* Lazy load plugins to avoid setup-unwrap cycle

* Remove commented blocks

* Refactor NewTestCluster, use single core cluster on basic plugin tests

* Set c.pluginDirectory in TestAddTestPlugin for setupPluginCatalog to work properly

* Add special path to mock plugin

* Move ensureCoresSealed to vault/testing.go

* Use same method for EnsureCoresSealed and Cleanup

* Bump ensureCoresSealed timeout to 60s

* Correctly handle nil opts on NewTestCluster

* Add metadata flag to APIClientMeta, use meta-enabled plugin when mounting to bootstrap

* Check metadata flag directly on the plugin process

* Plumb isMetadataMode down to PluginRunner

* Add NOOP shims when running in metadata mode

* Remove unused flag from the APIMetadata object

* Remove setupSecretPlugins and setupCredentialPlugins functions

* Move when we setup rollback manager to after the plugins are initialized

* Fix tests

* Fix merge issue

* start rollback manager after the credential setup

* Add guards against running certain client and server functions while in metadata mode

* Call initialize once a plugin is loaded on the fly

* Add more tests, update basic secret/auth plugin tests to trigger lazy loading

* Skip mount if plugin removed from catalog

* Fixup

* Remove commented line on LookupPlugin

* Fail on mount operation if plugin is re-added to catalog and mount is on existing path

* Check type and special paths on startBackend

* Fix merge conflicts

* Refactor PluginRunner run methods to use runCommon, fix TestSystemBackend_Plugin_auth
2017-09-01 01:02:03 -04:00
Jeff Mitchell
3f4a593ec2 changelog++ 2017-08-31 23:09:09 -04:00
Jeff Mitchell
360ac51547 changelog++ 2017-08-31 23:08:32 -04:00
Jeff Mitchell
4ad96d9513 Add pki/root/sign-self-issued. (#3274)
* Add pki/root/sign-self-issued.

This is useful for root CA rolling, and is also suitably dangerous.

Along the way I noticed we weren't setting the authority key IDs
anywhere, so I addressed that.

* Add tests
2017-08-31 23:07:15 -04:00
Jeff Mitchell
1a289db84a Travis, be happier please 2017-08-31 21:43:31 -04:00
Jeff Mitchell
8f2824c1e4 changelog++ 2017-08-31 16:58:05 -04:00
Jeff Mitchell
79b63deaf5 Change auth helper interface to api.Secret. (#3263)
This allows us to properly handle wrapped responses.

Fixes #3217
2017-08-31 16:57:00 -04:00
Jeff Mitchell
a125e902c4 changelog++ 2017-08-31 16:52:06 -04:00
Jeff Mitchell
2748d9b31b Try reconnecting Mongo on EOF (#3269) 2017-08-31 16:50:26 -04:00
Jeff Mitchell
7230d4da5c Don't append a trailing slash to the request path if it doesn't actually help find something (#3271) 2017-08-31 16:50:03 -04:00
Jeff Mitchell
717560facf changelog++ 2017-08-31 15:50:14 -04:00
Jeff Mitchell
f3a3e5ad8f Use TypeDurationSecond for TTL values in PKI. (#3270) 2017-08-31 15:46:13 -04:00
Calvin Leung Huang
aad57fdd74 changelog++ 2017-08-31 14:53:50 -04:00
Jeff Mitchell
8a08f0947f changelog++ 2017-08-31 12:32:15 -04:00
Jeff Mitchell
f4c12b8ec7 Use net.SplitHostPort on Consul address (#3268) 2017-08-31 12:31:34 -04:00
Calvin Leung Huang
d10075e0fd Normalize plugin_name option for mount and enable-auth (#3202) 2017-08-31 12:16:59 -04:00
Chris Hoffman
e54a3dbe47 Updating Okta lib for credential backend (#3245)
* migrating to chrismalek/oktasdk-go Okta library

* updating path docs

* updating bool reference from config
2017-08-30 22:37:21 -04:00
Jeff Mitchell
0d985f6e8a Explicitly mention that aws/aws-ec2 were unified under aws. 2017-08-30 22:12:10 -04:00
Jeff Mitchell
22528daac6 Add 'discard' target to file audit backend (#3262)
Fixes #seth
2017-08-30 19:16:47 -04:00
Jeff Mitchell
b0f8d1670e changelog++ 2017-08-30 17:52:40 -04:00
Joel Thompson
c641938cef auth/aws: Allow wildcard in bound_iam_principal_id (#3213) 2017-08-30 17:51:48 -04:00
Jeff Mitchell
8a39595fc8 changelog++ 2017-08-30 16:29:42 -04:00
Jeff Mitchell
3f31ed733f Add option to set cluster TLS cipher suites. (#3228)
* Add option to set cluster TLS cipher suites.

Fixes #3227
2017-08-30 16:28:23 -04:00
Jeff Mitchell
2ca896ccea changelog++ 2017-08-30 15:42:44 -04:00
stephan stachurski
55fa69a2f4 add support to use application default credentials to gcs storage backend (#3257) 2017-08-30 15:42:02 -04:00
Seth Vargo
5e148ac742 Merge pull request #3258 from hashicorp/sethvargo/custom
Remove fake news about custom plugins
2017-08-30 13:50:32 -04:00
Seth Vargo
aa1591cd3b
Remove fake news about custom plugins
This also adds a redirect from the old page to the new one
2017-08-30 12:57:45 -04:00
Calvin Leung Huang
2e39d2b2d4 Fix travis build on go 1.9 2017-08-29 15:55:34 -04:00
Jeff Mitchell
94d335e66d changelog++ 2017-08-29 14:52:15 -04:00
Christopher Pauley
f2d452b5e1 stdout support for file backend via logger (#3235) 2017-08-29 14:51:16 -04:00
Lars Lehtonen
56f127300d fix swallowed errors in pki package tests (#3215) 2017-08-29 13:15:36 -04:00
djboris9
76e3ffc58f Fix API/AUTH/AppRole doc issue concerning bound_cidr_list (#3205)
This patch fixes a little documentation issue.
bind_cidr_list doesn't exist as parameter to AppRole creation. It should be "bound_cidr_list".
In "path-help" it is documented correctly.
2017-08-29 12:37:20 -04:00
Jeff Mitchell
b9711d040f changelog++ 2017-08-25 14:49:15 -04:00
Jeff Mitchell
341636336b Compare groups case-insensitively at login time (#3240)
* Compare groups case-insensitively at login time, since Okta groups are
case-insensitive but preserving.

* Make other group operations case-preserving but otherwise
case-insensitive. New groups will be written in lowercase.
2017-08-25 14:48:37 -04:00
Hamza Tümtürk
ae825401e1 Add missing code ending to Sample Payload (#3239) 2017-08-25 12:34:12 -04:00
Jeff Mitchell
ce9662f6b6 changelog++ 2017-08-25 10:50:28 -04:00
Jon Benson
542d4cda62 Fix typo (#3237) 2017-08-25 09:51:33 -04:00
Brian Kassouf
41219493ec Update to go1.9 on travis 2017-08-24 15:55:04 -07:00
Brian Kassouf
3b91319458 changelog++ 2017-08-24 15:28:12 -07:00
Brian Kassouf
41db07530a Add basic autocompletion (#3223)
* Add basic autocompletion

* Add autocomplete to some common commands

* Autocomplete the generate-root flags

* Add information about autocomplete to the docs
2017-08-24 15:23:40 -07:00
Jeff Mitchell
f526091a7d Have Okta properly handle create/update for org/ttl/max_ttl. (#3236) 2017-08-24 18:18:05 -04:00
Chris Hoffman
950eaeea55 fix docs formatting 2017-08-24 11:23:26 -04:00
Christopher Pauley
446c25aacc update gcs backend tests- now strongly consistent (#3231) 2017-08-24 10:11:11 -04:00
Serg
c228f880c8 Update index.html.md (#3233) 2017-08-24 10:08:35 -04:00
Chris Hoffman
a7105536d6 Add GET variant on LIST endpoints (#3232) 2017-08-23 17:59:22 -04:00
Jeff Mitchell
58e6ad9a80 changelog++ 2017-08-23 12:01:03 -04:00