7782 Commits

Author SHA1 Message Date
Brian Kassouf
4eb771cb9b Changelog++ 2017-03-02 13:59:20 -08:00
Jeff Mitchell
e8e1905c96 Some minor ssh docs updating 2017-03-02 16:47:21 -05:00
Jeff Mitchell
5fe459f91a Update SSH CA logic/tests 2017-03-02 16:39:22 -05:00
Vishal Nayak
93b74ebe71 Refactor the generate_signing_key processing (#2430) 2017-03-02 16:22:06 -05:00
Jeff Mitchell
1c821e448d Update error text to make it more obvious what the issue is when valid principals aren't found 2017-03-02 15:56:08 -05:00
Jeff Mitchell
db29bde264 Fix a bunch of errors from returning 5xx, and parse more duration types 2017-03-02 15:38:34 -05:00
Jeff Mitchell
f0963180a2 changelog++ 2017-03-02 15:00:01 -05:00
Jeff Mitchell
510d443955 Understand local when persisting mount tables, to avoid invalidations when not necessary (#2427) 2017-03-02 14:37:59 -05:00
Will May
ffb5ee7fda Changes from code review 2017-03-02 14:36:13 -05:00
Will May
f9d853f7f0 Allow internal generation of the signing SSH key pair 2017-03-02 14:36:13 -05:00
Jeff Mitchell
eb88b89816 Fix double-lock 2017-03-02 10:54:31 -05:00
Jeff Mitchell
ddda27bf32 Use own mutex for updating cluster parameters and fix leader UUID bug 2017-03-02 10:50:54 -05:00
Jeff Mitchell
72989d190b Add some trace level information about new cluster status 2017-03-02 10:21:35 -05:00
Jeff Mitchell
174de7d80f Large update to request forwarding handling. (#2426) 2017-03-02 10:03:49 -05:00
Jeff Mitchell
a757161b53 Bump http2 dep to fix Go 1.8 breakage 2017-03-02 00:46:17 -05:00
Jeff Mitchell
24768a06a9 Some more forwarding client cleanup 2017-03-01 20:59:20 -05:00
Jeff Mitchell
83845a30fb Clean up request forwarding logic 2017-03-01 18:17:06 -05:00
Brian Kassouf
543049827e Update TestSeal to ignore setting the config to nil 2017-03-01 14:10:06 -08:00
vishalnayak
8f2b1829a1 changelog++ 2017-03-01 16:00:20 -05:00
Vishal Nayak
d30a833db7 Rework ssh ca (#2419)
* docs: input format for default_critical_options and default_extensions

* s/sshca/ssh

* Added default_critical_options and default_extensions to the read endpoint of role

* Change default time return value to 0
2017-03-01 15:50:23 -05:00
Will May
7d9cb5bffe Changes from code review
Major changes are:
* Remove duplicate code
* Check the public key used to configure the backend is a valid one
2017-03-01 15:19:18 -05:00
Will May
59397250da Changes from code review
Major changes are:
* Change `allow_{user,host}_certificates` to default to false
* Add separate `allowed_domains` role property
2017-03-01 15:19:18 -05:00
Will May
1d59b965cb Add ability to create SSH certificates 2017-03-01 15:19:18 -05:00
Jeff Mitchell
cdd02606c0 Rejig signature of last remote wal 2017-03-01 12:42:10 -05:00
Jeff Mitchell
b62770cb2e Add last remote WAL bits 2017-03-01 12:40:36 -05:00
Seth Vargo
dcf2a56307
Re-enable soft purging, stale-if-error 2017-03-01 12:38:40 -05:00
Jeff Mitchell
2ac644d983 Add ability to set max retries to API 2017-03-01 12:24:08 -05:00
Jeff Mitchell
d93dcd8a10 Have duration.ParseDurationSecond handle json.Number 2017-03-01 08:32:05 -05:00
Jeff Mitchell
101f61f5ac Add seal cache purging back into postUnseal 2017-02-28 18:36:28 -05:00
Jeff Mitchell
51f2040def Rejig core standby logic to check validity of barrier during active transition 2017-02-28 18:17:30 -05:00
Seth Vargo
6fdf8336cd Cache for a longer time on Fastly (#2417) 2017-02-28 16:54:51 -05:00
Jordan Abderrachid
aae23b1ea1 api: add EnvVaultToken constant. (#2413) 2017-02-27 18:36:21 -05:00
Jeff Mitchell
a93f12ba4e changelog++ 2017-02-27 15:41:40 -05:00
Jeff Mitchell
27f917d656 Update policies doc with allowed/denied params and min/max wrapping ttl info 2017-02-27 15:17:19 -05:00
Jeff Mitchell
95513e0f1e Add max/min wrapping TTL ACL statements (#2411) 2017-02-27 14:42:00 -05:00
Jeff Mitchell
1a67f86fa0 changelog++ 2017-02-27 14:31:54 -05:00
Marshall Brekka
2ee7e26dae Add a TTL to the dynamodb lock implementation. (#2141) 2017-02-27 14:30:34 -05:00
Jeff Mitchell
7c4e5a775c Fix breakage for HTTP2 support due to changes in wrapping introduced in 1.8 (#2412) 2017-02-27 12:49:35 -05:00
Jeff Mitchell
adcc95d61a Make rollback attempts trace level instead of debug level 2017-02-27 09:41:56 -05:00
Sean Chittenden
f075d7a3cd
Change the default DisplayName for a Circonus check to be Vault instead of the InstanceID.
Trivial defaults change, committing direct to `master`.
2017-02-26 15:18:46 -08:00
Jeff Mitchell
7a31da8d94 Add dockertest.v3 to vendor 2017-02-26 16:53:19 -05:00
vishalnayak
ee4c13c944 docs: update sys heal status codes 2017-02-26 15:20:23 -05:00
Gregory Reshetniak
12d49f83dc Update sys-health.html.md
typo
2017-02-26 15:20:23 -05:00
Jeff Mitchell
4045c1791e Fix github compile breakage after dep upgrade 2017-02-24 15:32:05 -05:00
Jeff Mitchell
ec7ec42e4c Update deps 2017-02-24 14:36:54 -05:00
Jeff Mitchell
a4d535c9c1 changelog++ 2017-02-24 14:29:03 -05:00
Jeff Mitchell
615945a6b0 Move http-using API tests into http package 2017-02-24 14:23:21 -05:00
vishalnayak
4e9c650a0c changelog++ 2017-02-24 14:20:57 -05:00
Vishal Nayak
241835b6f4 Aws Ec2 additional binds for SubnetID, VpcID and Region (#2407)
* awsec2: Added bound_region

* awsec2: Added bound_subnet_id and bound_vpc_id

* Add bound_subnet_id and bound_vpc_id to docs

* Remove fmt.Printf

* Added crud test for aws ec2 role

* Address review feedback
2017-02-24 14:19:10 -05:00
Jeff Mitchell
9533d3d8a6 Don't try synthesizing cluster when not in dev mode 2017-02-24 12:50:26 -05:00