8088 Commits

Author SHA1 Message Date
Jeff Mitchell
7dd05ab2b8 changelog++ 2018-05-23 09:57:27 -04:00
Jeff Mitchell
3dcd5a2a17
Add missing flags to KV commands and simplify boilerplate (#4617) 2018-05-23 09:56:47 -04:00
Chris Hoffman
c42adad873
remove incorrect parameter 2018-05-23 08:58:27 -04:00
Matthew Irish
1a9e7287df
Update CHANGELOG.md 2018-05-22 16:52:28 -05:00
Matthew Irish
42b329eb25
fix issue where unwrapping a response with an auth block wouldn't work (#4611) 2018-05-22 16:49:29 -05:00
Jeff Mitchell
1fb28cf398 Add a switch for the demo server to use version 2 kv mount by default 2018-05-22 17:31:36 -04:00
Chris Hoffman
a43143889e
changelog++ 2018-05-22 16:52:18 -04:00
Jeff Mitchell
8011cfe703 Update to TrustedCAFile for etcd as CAFile is deprecated and removed in latest libs 2018-05-22 15:46:39 -04:00
Jeff Mitchell
674c107ad4 Specify go-oidc v2 for update-deps 2018-05-22 15:42:54 -04:00
Becca Petrin
8b4f412299
Fix possible nil pointer on mapping method (#4609) 2018-05-22 12:10:36 -07:00
Yoko
d67e3b3200
Seal Wrap / FIPS 140-2 Compliance guide (#4558)
* WIP - Seal Wrap guide

* WIP: Seal Wrap guide

* Added a brief description about the Seal Wrap guide

* Incorporated feedbacks

* Updated FIPS language

Technically everything looks great. I've updated some of the language here as "compliance" could be interpreted to mean that golang's crypto and xcrypto libraries have been certified compliant with FIPS. Unfortunately they have not, and Leidos' cert is only about how Vault can operate in tandem with FIPS-certified modules.

It's a very specific update, but it's an important one for some VE customers.

Looks great - thanks!

* Removed 'Compliance' from title

* typo fix
2018-05-22 11:23:11 -07:00
Jeff Mitchell
c0275a3c7d Add instructions for both kvv1 and kvv2 to getting started policies info 2018-05-22 14:07:12 -04:00
Yoko
500cb5737c
Mount Filters guide (#4536)
* WIP: Mount filter guide

* WIP

* Mount filter guide for CLI, API, and UI

* updated the next step

* Updated the verification steps

* Added a note about the unseal key on secondaries

* Added more details

* Added a reference to mount filter guide

* Added a note about generating a new root token

* Added a note about local secret engine
2018-05-22 08:57:36 -07:00
Jeff Mitchell
4c6fb7b19c changelog++ 2018-05-22 10:39:24 -04:00
Chris Hoffman
25df1c28e4
updating link 2018-05-22 10:00:20 -04:00
Dan Brown
4fc853a04a Fix typo (#4607) 2018-05-22 08:30:13 -04:00
Becca Petrin
6c4266e553
move fields and field parsing to helper (#4603) 2018-05-21 17:04:26 -07:00
Chris Hoffman
e614cadbe5
adding options information to mount endpoint (#4606) 2018-05-21 16:39:43 -04:00
madalynrose
e0652de81f
Update CHANGELOG.md 2018-05-21 14:54:05 -04:00
madalynrose
6888781969
update hmac form and component to use 'algorithm' instead of 'hash-algorithm' (#4604) 2018-05-21 14:50:54 -04:00
Becca Petrin
ca2bdbb8c0
Restrict userpass logins & tokens by CIDR (#4557) 2018-05-21 11:47:28 -07:00
Brian Kassouf
e49e261f8c
Don't reload singleton mounts (#4593) 2018-05-21 11:05:04 -07:00
Jeff Mitchell
c368238fe0 changelog++ 2018-05-21 09:21:24 -04:00
Jeff Mitchell
1fa5e18d44 Make description of prehashed a bit more friendly 2018-05-21 09:08:22 -04:00
Jeff Mitchell
fdf368c843 changelog++ 2018-05-19 13:25:27 -04:00
Jeff Mitchell
157a14e7f9
Fix role writing not allowing key_type of any (#4596)
Fixes #4595
2018-05-19 10:24:43 -07:00
Jeff Mitchell
ec24d3d2f7 Update key_type parameter description 2018-05-19 12:20:37 -04:00
Jeff Mitchell
ae1732d485 Bump travis go version 2018-05-19 12:07:13 -04:00
Kevin Paulisse
7a6777b41a Docs: Clarify that revoking token revokes dynamic secrets (#4592) 2018-05-18 23:27:53 -07:00
Jeff Mitchell
f85ed110d8 Update issue templates 2018-05-18 17:49:30 -04:00
Jeff Mitchell
ae41ad84ec Update issue templates 2018-05-18 17:46:31 -04:00
Jeff Mitchell
20ca95e593 Update issue templates 2018-05-18 17:20:36 -04:00
Jeff Mitchell
320edcc6b1 changelog++ 2018-05-18 16:35:01 -04:00
Jeff Mitchell
787c9ee090
Use copystructure when assigning allowed/denied params from nil check (#4585)
Fixes #4582
2018-05-18 13:33:49 -07:00
Calvin Leung Huang
a9daf49553
Optimize revokeSalted by not calling view.List twice (#4465)
* Optimize revokeSalted by not calling view.List twice

* Minor comment update

* Do not go through the orphaning dance if we are revoking the entire tree

* Update comment
2018-05-18 12:14:42 -07:00
Calvin Leung Huang
3a95aa55b9
Use a token store with an initialized exp mananger in TestTokenStore_RevokeSelf (#4590) 2018-05-18 12:13:37 -07:00
Jeff Mitchell
d991bc1917 Update go-retryablehttp de 2018-05-18 15:11:44 -04:00
Calvin Leung Huang
36837d8009
Return as internal error on failed token lookup (#4589) 2018-05-18 10:14:31 -07:00
Jeff Mitchell
cd46a01f24
Update command in UI DR guide to non-deprecated version (#4588) 2018-05-18 09:43:12 -07:00
Jeff Mitchell
f6b6ce1837 Add missing drsecondarycode to health API docs 2018-05-18 12:39:13 -04:00
Calvin Leung Huang
6bea768f0e
Return ts.Lookup error on handleCreateCommon (#4587)
* Return ts.Lookup error on handleCreateCommon

* Fix test
2018-05-18 09:30:03 -07:00
Jeff Mitchell
2f97c3017f Flip documented resolve_aws_unique_id value
Fixes #4583
2018-05-18 12:05:52 -04:00
Reid Wiggins
668e2358aa Add documentation for MySQL 5.6 root rotation (#4584)
The default root rotation statement for MySQL is only valid for 5.7 and
up. This commit adds example documentation for 5.6.

Fixes #4567
2018-05-18 08:56:11 -07:00
Romain Vrignaud
5e62b26f10 Rename Google Container Engine to Google Kubernetes Engine (#4586) 2018-05-18 08:19:56 -07:00
Martin Hrabovcin
358aabab95 physical/zookeeper: Re-try to release lock in case of failure (#4569) 2018-05-17 15:52:50 -07:00
Jeff Mitchell
91b9ffdb33
Merge pull request #4580 from tavislikedavis/patch-1
Update policies.html.md
2018-05-17 09:14:35 -07:00
Jeff Mitchell
15a365c76f
Updated for new syntax 2018-05-17 09:14:12 -07:00
Jeff Mitchell
2a6f08a0b8
Merge pull request #4575 from avoidik/patch-2
Add more essential notes into production hardening guide
2018-05-17 09:05:34 -07:00
Jeff Mitchell
f058a82010
Update production.html.md 2018-05-17 09:05:08 -07:00
Jim Kalafut
e47c602654
Fix GCP API parameter docs 2018-05-17 08:54:25 -07:00