Commit Graph

347 Commits

Author SHA1 Message Date
Jeff Mitchell
d647681a37 Update go-retryablehttp to get bodybytes, and circonus deps as those break without it 2019-02-01 17:13:21 -05:00
Jeff Mitchell
47d339fce1 Revert "Refactor common token fields and operations into a helper (#5953)"
This reverts commit 66c226c593.
2019-02-01 11:23:40 -05:00
Jeff Mitchell
f10857c6da Update go-ldap to fix #6135 2019-01-31 17:07:25 -05:00
Jeff Mitchell
66c226c593
Refactor common token fields and operations into a helper (#5953) 2019-01-30 16:23:28 -05:00
Jeff Mitchell
a8b3bc9301
Update to latest etcd and use the new repository packages (#6087)
This will be necessary for go mod work

Additionally, the srv api has changed. This adapts to it.
2019-01-23 14:35:03 -05:00
Becca Petrin
516520ab4e swap the forked aliyun sdk for the original (#6024) 2019-01-23 11:24:51 -05:00
Jeff Mitchell
d4bcc13072 Prepare for 1.0.2 2019-01-15 11:25:11 -05:00
Giacomo Tirabassi
726aa02038 Influxdb secret engine built-in plugin (#5924)
* intial work for influxdb secret plugin

* fixed typo

* added comment

* added documentation

* added tests

* fixed tests

* added vendoring

* minor testing issue with hardcoded values

* minor fixes
2019-01-08 17:26:16 -08:00
Julien Blache
29471c88e9 FoundationDB backend TLS support and housekeeping (#5800)
* Fix typo in documentation

* Update fdb-go-install.sh for new release tags

* Exclude FoundationDB bindings from vendoring, delete vendored copy

FoundationDB bindings are tightly coupled to the server version and
client library version used in a specific deployment. Bindings need
to be installed using the fdb-go-install.sh script, as documented in
the foundationdb backend documentation.

* Add TLS support to FoundationDB backend

TLS support appeared in FoundationDB 5.2.4, raising the minimum API version
for TLS-aware FoundationDB code to 520.

* Update documentation for FoundationDB TLS support
2019-01-08 09:01:44 -08:00
Jeff Mitchell
18e014ee93 Update plugins 2018-12-14 10:42:11 -05:00
Jeff Mitchell
1bc959ad5a CL and plugin updates 2018-12-03 11:45:02 -05:00
Brian Kassouf
0dc09be3e1 Update plugins 2018-11-20 11:43:38 -08:00
Brian Kassouf
89b83086cd release prep 2018-11-12 11:10:47 -08:00
Vishal Nayak
ba67172f0d
Update KV dependency (#5707) 2018-11-06 14:33:21 -05:00
Jim Kalafut
2d6bdecb55
Update kv dependency (#5700) 2018-11-05 21:42:44 -08:00
Nicolas Corrarello
53ad302a31 Adding support for Consul 1.4 ACL system (#5586)
* Adding support for Consul 1.4 ACL system

* Working tests

* Fixed logic gate

* Fixed logical gate that evaluate empty policy or empty list of policy names

* Ensure tests are run against appropiate Consul versions

* Running tests against official container with a 1.4.0-rc1 tag

* policies can never be nil (as even if it is empty will be an empty array)

* addressing feedback, refactoring tests

* removing cast

* converting old lease field to ttl, adding max ttl

* cleanup

* adding missing test

* testing wrong version

* adding support for local tokens

* addressing feedback
2018-11-02 10:44:12 -04:00
Jeff Mitchell
cb58182900 Update jwt to pull in groups claim delimiter pattern 2018-10-31 16:04:39 -04:00
Jim Kalafut
a92d999f08
Update Azure Secrets plugin (#5606) 2018-10-25 12:06:55 -07:00
Jeff Mitchell
5aa4dbbc9b Check in some generated protos needed by non-native archs 2018-10-23 12:46:47 -04:00
Chris Hoffman
107ba2ab9a adding gcpkms secrets engine (#784) 2018-10-22 23:39:25 -07:00
Matthew Irish
8c78bb54b2 Merge branch 'oss-master' into 1.0-beta-oss 2018-10-19 20:40:36 -05:00
Jim Kalafut
70f71103e6
Update Azure Secrets plugin (#5533) 2018-10-19 16:15:31 -07:00
Calvin Leung Huang
3d1f0d76c0
[Review Only] Autoseal OSS port (#757)
* Port awskms autoseal

* Rename files

* WIP autoseal

* Fix protobuf conflict

* Expose some structs to properly allow encrypting stored keys

* Update awskms with the latest changes

* Add KeyGuard implementation to abstract encryption/decryption of keys

* Fully decouple seal.Access implementations from sealwrap structs

* Add extra line to proto files, comment update

* Update seal_access_entry.go

* govendor sync

* Add endpoint info to configureAWSKMSSeal

* Update comment

* Refactor structs

* Update make proto

* Remove remove KeyGuard, move encrypt/decrypt to autoSeal

* Add rest of seals, update VerifyRecoveryKeys, add deps

* Fix some merge conflicts via govendor updates

* Rename SealWrapEntry to EncryptedBlobInfo

* Remove barrier type upgrade check in oss

* Add key to EncryptedBlobInfo proto

* Update barrierTypeUpgradeCheck signature
2018-10-19 14:43:57 -07:00
Brian Kassouf
d1401a83c4
Update deps (#5521) 2018-10-15 15:25:08 -07:00
Brian Kassouf
ce041c47e4
Update deps (#5520) 2018-10-15 14:36:55 -07:00
Becca Petrin
e7a0452736 vendor the desired version of go.uuid (#5458) 2018-10-03 15:30:05 -07:00
Brian Kassouf
b6ca59f0b4
Fix build (#5457) 2018-10-03 14:53:08 -07:00
Brian Kassouf
f2233d7a1c
Update Deps (#5454) 2018-10-03 09:55:26 -07:00
Brian Kassouf
38f9c65039 Update plugins 2018-10-02 11:14:15 -07:00
Becca Petrin
11abcec826 point at a fork of aliyun-oss-go-sdk (#5358) 2018-10-01 10:05:08 -07:00
Jeff Mitchell
9add4f0519
Add lz4 to compressutil (#5403) 2018-09-26 09:20:33 -05:00
Becca Petrin
d76e67afc7
add alicloud secrets engine (#5352) 2018-09-19 08:42:28 -07:00
Clint
f39bafbf9c
Translate AWS Rate limiting errors to 502 errors (#5270)
* Initial implemntation of returning 529 for rate limits

- bump aws iam and sts packages to v1.14.31 to get mocking interface
- promote the iam and sts clients to the aws backend struct, for mocking in tests
- this also promotes some functions to methods on the Backend struct, so
  that we can use the injected client

Generating creds requires reading config/root for credentials to contact
IAM. Here we make pathConfigRoot a method on aws/backend so we can clear
the clients on successful update of config/root path. Adds a mutex to
safely clear the clients

* refactor locking and unlocking into methods on *backend

* refactor/simply the locking

* check client after grabbing lock
2018-09-18 15:26:06 -05:00
Jeff Mitchell
a7dd669615 Bump for release 2018-09-05 13:17:37 -04:00
Becca Petrin
d69c674c8e Add AliCloud auth to the Vault Agent (#5179) 2018-09-05 11:56:30 -04:00
Jeff Mitchell
dc86fdef00 Sync plugin updates 2018-08-28 02:39:13 -04:00
Brian Kassouf
f085e7e0f9
Update kv plugin (#5187) 2018-08-25 14:56:40 -07:00
Jeff Mitchell
be0ed63f03 Get reflect2 into vendoring 2018-08-22 16:11:51 -04:00
Jeff Mitchell
750233fdb2 Add ali deps to vendor 2018-08-22 15:39:18 -04:00
Jim Kalafut
63abfec999
Update Azure Secrets plugin (#5154) 2018-08-21 21:05:05 -07:00
Jeff Mitchell
675bf7a08e Pull in go-ldap update that fixes comparison with AD 2018-08-20 18:16:47 -04:00
Jeff Mitchell
d52bddebd9 Sync plugins 2018-08-16 16:21:38 -04:00
Jim Kalafut
1b8b425e82 Initial import of Azure Secrets (#5120)
* Initial import of Azure Secrets

* Update vendor folder
2018-08-16 12:18:06 -07:00
Becca Petrin
d3f8eabb9b Add alicloud auth (#5123)
* add alicloud auth commands

* add dependencies
2018-08-16 12:17:49 -07:00
Nándor István Krácser
23d89841d7 Alibaba Object Storage support (#4783) 2018-08-13 17:03:24 -04:00
Brian Kassouf
cdc9b357e7
Update k8s auth (#5059) 2018-08-07 10:45:40 -07:00
Joel Thompson
f7150ae74c Vendor AWS ARN parser (#5048)
This adds the AWS ARN parser into the vendor as suggested by
https://github.com/hashicorp/vault/pull/4360#discussion_r186744987
2018-08-06 09:51:06 -07:00
Jim Kalafut
45341f911c Update GCP auth plugin (#5043)
Fixes #5037
2018-08-03 14:56:02 -07:00
Brian Kassouf
f8b3319546
Update ad plugin (#5008) 2018-07-27 14:52:38 -06:00
Jeff Mitchell
267e929553 Update plugins 2018-07-24 22:19:38 -04:00
Chris Hoffman
59a4145aa9
updating azure plugin (#4989) 2018-07-24 22:13:23 -04:00
Jeff Mitchell
903ab7c485
VSI (#4985) 2018-07-24 22:02:27 -04:00
Jim Kalafut
255b23156f
Update Azure auth plugin (#4978) 2018-07-23 15:00:46 -07:00
Chris Hoffman
3ba265cf6a
updating azure auth plugin and docs (#4975) 2018-07-23 10:00:44 -04:00
Jeff Mitchell
bdc0ddbb5e Update go-retryablehttp and affected deps 2018-07-19 08:50:18 -04:00
Jeff Mitchell
dba48d5265
Re-add dockertest and fix up imports and update script (#4909) 2018-07-11 17:49:13 -04:00
Jeff Mitchell
57b77dc702 Minor dep sync 2018-07-11 16:04:02 -04:00
Jeff Mitchell
b33cf19dd9 Sync jwt auth plugin 2018-07-10 11:14:36 -04:00
Jeff Mitchell
bd650812bc Add JWT plugin 2018-07-09 16:21:47 -04:00
Jeff Mitchell
fb13619ad6 Bump hclog 2018-07-09 12:54:13 -04:00
Jeff Mitchell
2240c71cc0 Bump deps 2018-07-09 12:41:21 -04:00
Chris Hoffman
c8ab530f8a
Bump Deps (#4868)
* bump deps

* revert script changes

* adding govendor miss
2018-07-06 12:09:34 -04:00
Jeff Mitchell
2ecfa638f1 Update kubernetes auth plugin 2018-06-19 23:03:22 -04:00
Jeff Mitchell
eddf053dab Update ad plugin 2018-06-19 12:16:20 -04:00
Jeff Mitchell
3893fa9bfa Bump Kube auth dep 2018-06-18 12:24:41 -04:00
Jeff Mitchell
ac4d7856f3 Bump plugins and changelog 2018-06-18 11:54:23 -04:00
Becca Petrin
6acad689c8
update go-ldap (#4776) 2018-06-15 10:13:57 -07:00
Jim Kalafut
d3604289be
Update aws-sdk-go/service/dynamodb/dynamodbattribute (#4744)
Fixes #4721, Fixes #4742
2018-06-12 06:07:15 -07:00
Jeff Mitchell
d9f73adabc Pull in kv fix for 4726 2018-06-08 13:48:25 -04:00
Jeff Mitchell
1b57fc53da Update plugins 2018-06-05 22:57:35 -04:00
Becca Petrin
99570d9438 update ad dependency (#4692) 2018-06-04 15:09:41 -04:00
Jeff Mitchell
86d4b3291c Bump retryablehttp dep 2018-05-31 17:14:04 -04:00
Jim Kalafut
76e774d6cc
Add gzip compression to UI static content responses (#4664) 2018-05-31 09:42:08 -07:00
Jeff Mitchell
f64b4b2e5f Update kv plugin 2018-05-30 09:07:19 -04:00
Jeff Mitchell
1dc0793b5e Bump plugin deps 2018-05-29 21:16:48 -04:00
emily
8568e791dd Add GCP auth helper (#4654)
* update auth plugin vendoring

* add GCP auth helper and docs
2018-05-29 20:36:24 -04:00
Becca Petrin
bbce9971fa
Update ad plugin (#4652) 2018-05-29 16:16:43 -07:00
Brian Kassouf
aeb29a5048 Update proto files (#4651) 2018-05-29 18:23:51 -04:00
Jeff Mitchell
6fa29dda67
Merge branch 'master' into rekey-verification 2018-05-29 10:19:57 -04:00
Becca Petrin
0b555f3058
Add Active Directory secrets plugin (#4635) 2018-05-25 11:37:41 -07:00
Jeff Mitchell
51fb86ad4d Add updated go-retryablehttp 2018-05-21 13:39:45 -04:00
Jeff Mitchell
d991bc1917 Update go-retryablehttp de 2018-05-18 15:11:44 -04:00
emily
2f6fb5b460 update gcputil deps (#4537) 2018-05-10 08:24:53 -04:00
Jeff Mitchell
9b718f27f9 Fix retryable dep 2018-05-09 20:52:44 -04:00
Jeff Mitchell
6386f486c3 Update retryable dep 2018-05-09 20:49:32 -04:00
Jeff Mitchell
79cdd34286 Update retryable vendor 2018-05-09 18:34:05 -04:00
Jeff Mitchell
004aec9611 Update go-retryablehttp and use PassthroughErrorHandler 2018-05-09 18:11:08 -04:00
Jeff Mitchell
0519f8634e Remove unneeeded dep 2018-05-09 17:50:49 -04:00
Jeff Mitchell
891ce7a975 Update go-retryablehttp vendor 2018-05-09 17:44:53 -04:00
Becca Petrin
ab9b638dbb
New proto version (#4501) 2018-05-03 10:19:39 -07:00
Brian Kassouf
a136c79147
Kv preflight (#4430)
* Update kv command to use a preflight check

* Make the existing ui endpoint return the allowed mounts

* Add kv subcommand tests

* Enable `-field` in `vault kv get/put` (#4426)

* Enable `-field` in `vault kv get/put`

Fixes #4424

* Unify nil value handling

* Use preflight helper

* Update vkv plugin

* Add all the mount info when authenticated

* Add fix the error message on put

* add metadata test

* No need to sort the capabilities

* Remove the kv client header

* kv patch command (#4432)

* Fix test

* Fix tests

* Use permission denied instead of entity disabled
2018-04-23 15:00:02 -07:00
Jeff Mitchell
6b12081fb4 Bump secrets-gcp for panic fix (#6) 2018-04-23 10:11:14 -04:00
Jeff Mitchell
3580853af2
Resultant acl (#4386) 2018-04-20 14:19:04 -04:00
Jeff Mitchell
27f7767900 Update gcp plugin 2018-04-17 13:50:28 -04:00
Jeff Mitchell
1077629faf Bump gcp secrets plugin 2018-04-17 11:59:43 -04:00
Andrew Hamilton
e2eb572056 Updates pester so that retries work (#4322) 2018-04-10 00:34:16 -04:00
Jeff Mitchell
6378bebec8 Bump KV plugin 2018-04-09 17:28:32 -04:00
Jeff Mitchell
cdce08ac89 Bump KV plugin and allow -version to work 2018-04-09 16:33:01 -04:00
Brian Kassouf
4825107a50
Update kv plugin (#4320) 2018-04-09 12:47:34 -07:00
Jeff Mitchell
4105c9189e Update azure plugin 2018-04-09 14:51:14 -04:00