7782 Commits

Author SHA1 Message Date
Jeff Mitchell
943cfd9b24 Remove errant unlock of state lock 2017-02-07 11:08:52 -05:00
Brian Kassouf
17d00d9548 Add info about UNIX sockets 2017-02-06 15:56:58 -08:00
Jeff Mitchell
9126e3bc34 Add debug (#2341) 2017-02-06 18:30:13 -05:00
Jeff Mitchell
518ebedce5 Rejig check for HA/Sealed in Leader to check for sealed first. (#2342)
Fixes #2334
2017-02-06 18:29:56 -05:00
Cameron Stokes
58c47af060 docs: add note about request size limit (#2337) 2017-02-06 18:24:40 -05:00
Jason Felice
0a1e7a7be4 ConfigureTLS() sets default HttpClient if nil (#2329) 2017-02-06 17:47:56 -05:00
Vishal Nayak
a9121ff733 transit: change batch input format (#2331)
* transit: change batch input format

* transit: no json-in-json for batch response

* docs: transit: update batch input format

* transit: fix tests after changing response format
2017-02-06 14:56:16 -05:00
Brian Kassouf
541c53d354 Added a single retry after a reconnection 2017-02-06 11:38:38 -08:00
Matthew Irish
b541d7d9a1 change log ++ 2017-02-06 12:16:40 -06:00
Jeff Mitchell
1cf67916d2 Add quickdev to Makefile 2017-02-05 20:30:40 -05:00
Brian Kassouf
aa32568aa9 Update the docs and move the logic for reconnecting into its own function 2017-02-04 16:55:17 -08:00
Jeff Mitchell
487a96fa17 Fix incorrect sample URL in aws-ec2 docs 2017-02-04 19:27:35 -05:00
Jeff Mitchell
ebea1b7de8 Make userpass help text mention radius too 2017-02-04 07:48:30 -05:00
Jeff Mitchell
243ab6bd01 Add default mount param to userpass cli handler 2017-02-04 07:47:09 -05:00
Brian Kassouf
8325d3a080 Update the help text for auditing headers (#2330)
* Update the help text for auditing headers

* Update help name
2017-02-03 10:08:31 -08:00
Brian Kassouf
fb1810c997 changelog++ 2017-02-02 16:03:49 -08:00
Brian Kassouf
b32cb4bedf Add write deadline and a Reload function 2017-02-02 15:44:56 -08:00
Harrison Harnisch
6da4806582 add socket audit backend 2017-02-02 14:21:48 -08:00
Jeff Mitchell
1f8df18065 Update protos 2017-02-02 16:20:32 -05:00
Jeff Mitchell
5e20429298 Update deps 2017-02-02 16:19:55 -05:00
Jeff Mitchell
1fa4c6232f changelog++ 2017-02-02 15:49:27 -05:00
Brian Kassouf
590b5681cd Configure the request headers that are output to the audit log (#2321)
* Add /sys/config/audited-headers endpoint for configuring the headers that will be audited

* Remove some debug lines

* Add a persistant layer and refactor a bit

* update the api endpoints to be more restful

* Add comments and clean up a few functions

* Remove unneeded hash structure functionaility

* Fix existing tests

* Add tests

* Add test for Applying the header config

* Add Benchmark for the ApplyConfig method

* ResetTimer on the benchmark:

* Update the headers comment

* Add test for audit broker

* Use hyphens instead of camel case

* Add size paramater to the allocation of the result map

* Fix the tests for the audit broker

* PR feedback

* update the path and permissions on config/* paths

* Add docs file

* Fix TestSystemBackend_RootPaths test
2017-02-02 11:49:20 -08:00
vishalnayak
6c028a7d4a changelog++ 2017-02-02 14:34:08 -05:00
Vishal Nayak
3797666436 Transit: Support batch encryption and decryption (#2143)
* Transit: Support batch encryption

* Address review feedback

* Make the normal flow go through as a batch request

* Transit: Error out if encryption fails during batch processing

* Transit: Infer the 'derived' parameter based on 'context' being set

* Transit: Batch encryption doc updates

* Transit: Return a JSON string instead of []byte

* Transit: Add batch encryption tests

* Remove plaintext empty check

* Added tests for batch encryption, more coming..

* Added more batch encryption tests

* Check for base64 decoding of plaintext before encrypting

* Transit: Support batch decryption

* Transit: Added tests for batch decryption

* Transit: Doc update for batch decryption

* Transit: Sync the path-help and website docs for decrypt endpoint

* Add batch processing for rewrap

* transit: input validation for context

* transit: add rewrap batch option to docs

* Remove unnecessary variables from test

* transit: Added tests for rewrap use cases

* Address review feedback

* Address review feedback

* Address review feedback

* transit: move input checking out of critical path

* transit: allow empty plaintexts for batch encryption

* transit: use common structs for batch processing

* transit: avoid duplicate creation of structs; add omitempty to response structs

* transit: address review feedback

* transit: fix tests

* address review feedback

* transit: fix tests

* transit: rewrap encrypt user error should not error out

* transit: error out for internal errors
2017-02-02 14:24:20 -05:00
vishalnayak
405939711a changelog++ 2017-02-02 13:30:04 -05:00
Vishal Nayak
660e606a7d awsec2: support periodic tokens (#2324)
* awsec2: support periodic tokens

* awsec2: add api docs for 'period'
2017-02-02 13:28:01 -05:00
Vishal Nayak
be9153cfcf approle: secret-id listing lock sanity check (#2315)
* approle: secret-id listing lock sanity

* Skip processing an empty secretIDHMAC item during the iteration

* approle: use dedicated lock for listing of secret-id-accessors
2017-02-01 18:13:49 -05:00
Jeff Mitchell
463cd340bd changelog++ 2017-02-01 14:16:35 -05:00
louism517
b548e2860c Support for Cross-Account AWS Auth (#2148) 2017-02-01 14:16:03 -05:00
Jeff Mitchell
af105b9150 changelog++ 2017-02-01 14:06:26 -05:00
Jeff Mitchell
3789e8c427 Add cleanup functions to multiple DB backends. (#2313)
Ensure it's called on unmount, not just for seal.
2017-02-01 14:05:25 -05:00
Jeff Mitchell
4104ae4f66 Make TLS 1.2 *explicitly* required for cluster communications 2017-01-31 13:30:25 -05:00
Jeff Mitchell
71b06ef32d That's what you get for not building first. 2017-01-30 11:46:45 -05:00
Jeff Mitchell
6842ad4966 Fix relying on old copystructure behavior 2017-01-30 11:31:20 -05:00
Jeff Mitchell
8dc60cca51 changelog++ 2017-01-30 09:27:39 -05:00
Jeff Mitchell
b44519e742 Make export errors a bit more meaningful 2017-01-30 09:25:50 -05:00
Jeff Mitchell
082aa90103 Have transit exporting return the same structure regardless of one key or many 2017-01-28 10:37:35 -05:00
Ryon Coleman
05277cfebf Add Google Tag Manager #GTM-NR2SD7C 2017-01-27 15:41:09 -05:00
Jeff Mitchell
15993a9934 Update deps 2017-01-26 20:16:19 -05:00
Jeff Mitchell
2498b6dfc7 changelog++ 2017-01-26 20:13:01 -05:00
Shane Starcher
a0b5eecc6d Okta implementation (#1966) 2017-01-26 19:08:52 -05:00
Xiang Li
73ad5b7da8 etcdbackend: support version auto discovery (#2299) 2017-01-26 17:19:13 -05:00
Brian Kassouf
c642fbf18e Migrate cassandra test from acceptance to dockertest (#2295) 2017-01-25 15:37:55 -05:00
Jeff Mitchell
06b7bb2373 Merge pull request #2296 from hashicorp/rfay-20161230_add_cookbook_with_root_token_generation
Add 'Guides' section
2017-01-25 15:33:43 -05:00
Jeff Mitchell
8f857bd5f5 Update docs.erb 2017-01-25 15:33:20 -05:00
Jeff Mitchell
49f1da2342 Revert file backend base64ing, as we need to fix a pathological case for some keys 2017-01-25 12:27:18 -05:00
Brian Kassouf
5ff4492a3c Fix keyring test 2017-01-24 12:58:14 -08:00
Jeff Mitchell
e9e42d9b2a Fix keyring copypasta test failure 2017-01-24 14:00:13 -05:00
Jeff Mitchell
22fbe83d83 Fix keyring tests, working around Go nil timezone bug in DeepEqual
See https://github.com/golang/go/issues/10089
2017-01-24 12:33:28 -05:00
Vishal Nayak
b3f83f710c Merge pull request #2298 from chrishoffman/docs-updates
Adding LDAP API reference to documentation
2017-01-24 12:29:18 -05:00