Commit Graph

347 Commits

Author SHA1 Message Date
Chris Hoffman
59a4145aa9
updating azure plugin (#4989) 2018-07-24 22:13:23 -04:00
Jeff Mitchell
903ab7c485
VSI (#4985) 2018-07-24 22:02:27 -04:00
Jim Kalafut
255b23156f
Update Azure auth plugin (#4978) 2018-07-23 15:00:46 -07:00
Chris Hoffman
3ba265cf6a
updating azure auth plugin and docs (#4975) 2018-07-23 10:00:44 -04:00
Jeff Mitchell
bdc0ddbb5e Update go-retryablehttp and affected deps 2018-07-19 08:50:18 -04:00
Jeff Mitchell
dba48d5265
Re-add dockertest and fix up imports and update script (#4909) 2018-07-11 17:49:13 -04:00
Jeff Mitchell
57b77dc702 Minor dep sync 2018-07-11 16:04:02 -04:00
Jeff Mitchell
b33cf19dd9 Sync jwt auth plugin 2018-07-10 11:14:36 -04:00
Jeff Mitchell
bd650812bc Add JWT plugin 2018-07-09 16:21:47 -04:00
Jeff Mitchell
fb13619ad6 Bump hclog 2018-07-09 12:54:13 -04:00
Jeff Mitchell
2240c71cc0 Bump deps 2018-07-09 12:41:21 -04:00
Chris Hoffman
c8ab530f8a
Bump Deps (#4868)
* bump deps

* revert script changes

* adding govendor miss
2018-07-06 12:09:34 -04:00
Jeff Mitchell
2ecfa638f1 Update kubernetes auth plugin 2018-06-19 23:03:22 -04:00
Jeff Mitchell
eddf053dab Update ad plugin 2018-06-19 12:16:20 -04:00
Jeff Mitchell
3893fa9bfa Bump Kube auth dep 2018-06-18 12:24:41 -04:00
Jeff Mitchell
ac4d7856f3 Bump plugins and changelog 2018-06-18 11:54:23 -04:00
Becca Petrin
6acad689c8
update go-ldap (#4776) 2018-06-15 10:13:57 -07:00
Jim Kalafut
d3604289be
Update aws-sdk-go/service/dynamodb/dynamodbattribute (#4744)
Fixes #4721, Fixes #4742
2018-06-12 06:07:15 -07:00
Jeff Mitchell
d9f73adabc Pull in kv fix for 4726 2018-06-08 13:48:25 -04:00
Jeff Mitchell
1b57fc53da Update plugins 2018-06-05 22:57:35 -04:00
Becca Petrin
99570d9438 update ad dependency (#4692) 2018-06-04 15:09:41 -04:00
Jeff Mitchell
86d4b3291c Bump retryablehttp dep 2018-05-31 17:14:04 -04:00
Jim Kalafut
76e774d6cc
Add gzip compression to UI static content responses (#4664) 2018-05-31 09:42:08 -07:00
Jeff Mitchell
f64b4b2e5f Update kv plugin 2018-05-30 09:07:19 -04:00
Jeff Mitchell
1dc0793b5e Bump plugin deps 2018-05-29 21:16:48 -04:00
emily
8568e791dd Add GCP auth helper (#4654)
* update auth plugin vendoring

* add GCP auth helper and docs
2018-05-29 20:36:24 -04:00
Becca Petrin
bbce9971fa
Update ad plugin (#4652) 2018-05-29 16:16:43 -07:00
Brian Kassouf
aeb29a5048 Update proto files (#4651) 2018-05-29 18:23:51 -04:00
Jeff Mitchell
6fa29dda67
Merge branch 'master' into rekey-verification 2018-05-29 10:19:57 -04:00
Becca Petrin
0b555f3058
Add Active Directory secrets plugin (#4635) 2018-05-25 11:37:41 -07:00
Jeff Mitchell
51fb86ad4d Add updated go-retryablehttp 2018-05-21 13:39:45 -04:00
Jeff Mitchell
d991bc1917 Update go-retryablehttp de 2018-05-18 15:11:44 -04:00
emily
2f6fb5b460 update gcputil deps (#4537) 2018-05-10 08:24:53 -04:00
Jeff Mitchell
9b718f27f9 Fix retryable dep 2018-05-09 20:52:44 -04:00
Jeff Mitchell
6386f486c3 Update retryable dep 2018-05-09 20:49:32 -04:00
Jeff Mitchell
79cdd34286 Update retryable vendor 2018-05-09 18:34:05 -04:00
Jeff Mitchell
004aec9611 Update go-retryablehttp and use PassthroughErrorHandler 2018-05-09 18:11:08 -04:00
Jeff Mitchell
0519f8634e Remove unneeeded dep 2018-05-09 17:50:49 -04:00
Jeff Mitchell
891ce7a975 Update go-retryablehttp vendor 2018-05-09 17:44:53 -04:00
Becca Petrin
ab9b638dbb
New proto version (#4501) 2018-05-03 10:19:39 -07:00
Brian Kassouf
a136c79147
Kv preflight (#4430)
* Update kv command to use a preflight check

* Make the existing ui endpoint return the allowed mounts

* Add kv subcommand tests

* Enable `-field` in `vault kv get/put` (#4426)

* Enable `-field` in `vault kv get/put`

Fixes #4424

* Unify nil value handling

* Use preflight helper

* Update vkv plugin

* Add all the mount info when authenticated

* Add fix the error message on put

* add metadata test

* No need to sort the capabilities

* Remove the kv client header

* kv patch command (#4432)

* Fix test

* Fix tests

* Use permission denied instead of entity disabled
2018-04-23 15:00:02 -07:00
Jeff Mitchell
6b12081fb4 Bump secrets-gcp for panic fix (#6) 2018-04-23 10:11:14 -04:00
Jeff Mitchell
3580853af2
Resultant acl (#4386) 2018-04-20 14:19:04 -04:00
Jeff Mitchell
27f7767900 Update gcp plugin 2018-04-17 13:50:28 -04:00
Jeff Mitchell
1077629faf Bump gcp secrets plugin 2018-04-17 11:59:43 -04:00
Andrew Hamilton
e2eb572056 Updates pester so that retries work (#4322) 2018-04-10 00:34:16 -04:00
Jeff Mitchell
6378bebec8 Bump KV plugin 2018-04-09 17:28:32 -04:00
Jeff Mitchell
cdce08ac89 Bump KV plugin and allow -version to work 2018-04-09 16:33:01 -04:00
Brian Kassouf
4825107a50
Update kv plugin (#4320) 2018-04-09 12:47:34 -07:00
Jeff Mitchell
4105c9189e Update azure plugin 2018-04-09 14:51:14 -04:00
Brian Kassouf
c5758113df
Update kv plugin (#4317) 2018-04-09 10:20:47 -07:00
Brian Kassouf
711d0efea5
Update kv plugin (#4315) 2018-04-09 09:52:13 -07:00
Jeff Mitchell
11352ceff6 Update vault-plugin-auth-gcp to get client invalidation fix 2018-04-07 21:07:43 -04:00
Chris Hoffman
4322457b69
update azure plugin (#4306) 2018-04-07 11:20:22 -04:00
Jeff Mitchell
eb3aa20e5d Update CLI coloring 2018-04-06 14:38:56 -04:00
Jeff Mitchell
1a0901d15b Update auth-gcp plugin 2018-04-05 17:34:27 -04:00
Jeff Mitchell
1e2a293768 Bump kv plugin 2018-04-05 14:09:19 -04:00
Chris Hoffman
4061272bc5
update azure plugin (#4266) 2018-04-04 08:02:37 -04:00
Jeff Mitchell
583efb1e20 Update plugins 2018-04-03 22:40:35 -04:00
Jeff Mitchell
3b7f197f55 Bump vkv plugin 2018-04-03 17:09:33 -04:00
Jeff Mitchell
c76628b278 Update vkv plugin 2018-04-03 15:55:57 -04:00
Jeff Mitchell
47e3a03622 Bump vkv plugin 2018-04-03 15:04:33 -04:00
Jeff Mitchell
4dd1a6e23c Interim vkv plugin push 2018-04-03 14:34:36 -04:00
Chris Hoffman
af33ece136 OSS: Adding UI handlers and configurable headers (#390)
* adding UI handlers and UI header configuration

* forcing specific static headers

* properly getting UI config value from config/environment

* fixing formatting in stub UI text

* use http.Header

* case-insensitive X-Vault header check

* fixing var name

* wrap both stubbed and real UI in header handler

* adding test for >1 keys
2018-04-03 09:34:01 -05:00
Becca Petrin
792d219aa9 Move to "github.com/hashicorp/go-hclog" (#4227)
* logbridge with hclog and identical output

* Initial search & replace

This compiles, but there is a fair amount of TODO
and commented out code, especially around the
plugin logclient/logserver code.

* strip logbridge

* fix majority of tests

* update logxi aliases

* WIP fixing tests

* more test fixes

* Update test to hclog

* Fix format

* Rename hclog -> log

* WIP making hclog and logxi love each other

* update logger_test.go

* clean up merged comments

* Replace RawLogger interface with a Logger

* Add some logger names

* Replace Trace with Debug

* update builtin logical logging patterns

* Fix build errors

* More log updates

* update log approach in command and builtin

* More log updates

* update helper, http, and logical directories

* Update loggers

* Log updates

* Update logging

* Update logging

* Update logging

* Update logging

* update logging in physical

* prefixing and lowercase

* Update logging

* Move phyisical logging name to server command

* Fix som tests

* address jims feedback so far

* incorporate brians feedback so far

* strip comments

* move vault.go to logging package

* update Debug to Trace

* Update go-plugin deps

* Update logging based on review comments

* Updates from review

* Unvendor logxi

* Remove null_logger.go
2018-04-02 17:46:59 -07:00
Jeff Mitchell
28ed54fc12 Merge in go-hclog 2018-04-02 16:14:46 -04:00
Jeff Mitchell
665707adb6 Merge in go-hclog 2018-04-02 15:58:31 -04:00
Jeff Mitchell
863b69a75d Update go-hclog and go-plugin 2018-04-02 14:22:52 -04:00
Jeff Mitchell
b6513c1ddc
1.10 Updates (#4218) 2018-03-29 15:32:16 -04:00
Chris Hoffman
86002e4517
updating azure plugin and deps (#4191) 2018-03-23 16:48:05 -04:00
Jeff Mitchell
2ab1468cc5 Remove unneeded dep file 2018-03-21 23:10:34 -04:00
Brian Kassouf
1626803f3f Update kv backend and add some docs (#4182)
* Add kv backend

* Move kv in apha order

* Update kv backend and add some docs
2018-03-21 23:10:05 -04:00
Jeff Mitchell
3c51d97ee9 Add gcp secrets 2018-03-21 23:07:16 -04:00
Jeff Mitchell
8be8f94396 Update kv with existence check 2018-03-21 22:58:11 -04:00
Brian Kassouf
d51dc47070 Add kv backend (#4181) 2018-03-21 22:56:52 -04:00
Chris Hoffman
df723aa4b6
adding azure auth plugin (#4180) 2018-03-21 17:35:31 -04:00
Jeff Mitchell
8644add18b Update hcl 2018-03-20 16:36:37 -04:00
Jeff Mitchell
f105461df5 Push up changes to prep for release 2018-03-20 14:10:53 -04:00
Jeff Mitchell
d7a46c631c Use public forked big package for encrypted_key_storage file until Go 1.10 2018-03-16 10:30:05 -04:00
Jeff Mitchell
2c5d298913 Bump complete. Fixes #4094 2018-03-09 10:43:20 -05:00
Brian Kassouf
5a89b054e8
helper/keysutil: Add a storage implementation that uses policies to encrypt paths (#3989)
* helper/keysutil: Add a policy encrypted path storage

* Add vendored deps

* Fix spelling and paths that start with a /

* Add a key version template to change configure the ciphertext prefix

* Use big.Int for base58 instead of external lib

* Update go requirment to 1.10

* Add a version prefix cache

* Move logic to helper function

* Cache the template parts

* Add a storage prefix to policy

* Add an error if the policy passed in is nil

* Pull in the go1.10 version of the math/big package until we can update
2018-03-08 17:58:50 -08:00
Jeff Mitchell
3d4f4cdc01 Sync plugins 2018-02-26 12:24:04 -05:00
Jeff Mitchell
b175583d28 Bump pkcs7 library version to fix #4024 2018-02-22 20:11:49 -05:00
Jeff Mitchell
e950b77544 Revert "Switch to a forked copy of pkcs7 to fix aws pkcs7 verification error (#4024)"
This reverts commit f75c7dd157.
2018-02-22 20:09:19 -05:00
Jeff Mitchell
f75c7dd157
Switch to a forked copy of pkcs7 to fix aws pkcs7 verification error (#4024)
Fixes #4014
2018-02-22 08:49:11 -05:00
Jeff Mitchell
eecb4edf2a Update plugins 2018-02-20 14:15:43 -05:00
Seth Vargo
7af2bdc5a4 Add support for Google Cloud Spanner (#3977) 2018-02-14 20:31:20 -05:00
Jeff Mitchell
dddf5e726e Update Okta dep.
Fixes #3963
2018-02-14 09:38:46 -05:00
Jeff Mitchell
bd8f461f17 Update triton version 2018-02-12 18:27:18 -05:00
Paul Stack
7181749031 Adding Manta Storage Backend (#3720)
This PR adds a new Storage Backend for Triton's Object Storage - Manta

```
make testacc TEST=./physical/manta
==> Checking that code complies with gofmt requirements...
==> Checking that build is using go version >= 1.9.1...
go generate
VAULT_ACC=1 go test -tags='vault' ./physical/manta -v  -timeout 45m
=== RUN   TestMantaBackend
--- PASS: TestMantaBackend (61.18s)
PASS
ok  	github.com/hashicorp/vault/physical/manta	61.210s
```

Manta behaves differently to how S3 works - it has no such concepts of Buckets - it is merely a filesystem style object store

Therefore, we have chosen the approach of when writing a secret `foo` it will actually map (on disk) as foo/.vault_value

The reason for this is because if we write the secret `foo/bar` and then try and Delete a key using the name `foo` then Manta
will complain that the folder is not empty because `foo/bar` exists. Therefore, `foo/bar` is written as `foo/bar/.vault_value`

The value of the key is *always* written to a directory tree of the name and put in a `.vault_value` file.
2018-02-12 18:22:41 -05:00
Jeff Mitchell
1bb6bf2559 Bump deps 2018-02-10 19:29:52 -05:00
Jeff Mitchell
e47c53dcab Update go-plugin 2018-02-06 13:31:13 -05:00
Jeff Mitchell
964bde2349 Update zookeeper dep
Fixes #3896
2018-02-05 11:22:21 -05:00
Jeff Mitchell
43493f2767 Bump deps 2018-01-26 18:51:00 -05:00
Jeff Mitchell
159bf65f66 Sync plugins 2018-01-26 09:04:48 -05:00
Jeff Mitchell
2a04720421 Update plugins 2018-01-24 23:24:16 -05:00
Jeff Mitchell
f4b2a9c2db Update go-plugin dep 2018-01-23 18:18:04 -05:00
Calvin Leung Huang
c3c63313f3
Version protocol switch (#3833)
* Use version to determine plugin protocol to use

* Remove field from ServeOpts

* Fix missing assignment, handle errors

* contraint -> constraint

* Inject the version string from the vault side

* Fix the version check

* Add grpc support check to database plugins

* Default to use grpc unless missing env var or fail on contraint check

* Add GRPCSupport test

* Add greater than test case

* Add go-version dep
2018-01-23 17:29:26 -05:00
Jeff Mitchell
e1028c644f Add centrify plugin as builtin 2018-01-19 06:03:33 -05:00
Jeff Mitchell
07893b2659 Add gcp and kubernetes back now that they're updated 2018-01-19 05:56:34 -05:00
Brian Kassouf
8142b42d95 Add context to storage backends and wire it through a lot of places (#3817) 2018-01-19 01:44:44 -05:00
Jeff Mitchell
2864fbd697 bump go-plugin 2018-01-18 16:58:03 -05:00
Brian Kassouf
03f6108822
gRPC Backend Plugins (#3808)
* Add grpc plugins

* Add grpc plugins

* Translate wrap info to/from proto

* Add nil checks

* Fix nil marshaling errors

* Provide logging through the go-plugin logger

* handle errors in the messages

* Update the TLS config so bidirectional connections work

* Add connectivity checks

* Restart plugin and add timeouts where context is not availible

* Add the response wrap data into the grpc system implementation

* Add leaseoptions to pb.Auth

* Add an error translator

* Add tests for translating the proto objects

* Fix rename of function

* Add tracing to plugins for easier debugging

* Handle plugin crashes with the go-plugin context

* Add test for grpcStorage

* Add tests for backend and system

* Bump go-plugin for GRPCBroker

* Remove RegisterLicense

* Add casing translations for new proto messages

* Use doneCtx in grpcClient

* Use doneCtx in grpcClient

* s/shutdown/shut down/
2018-01-18 13:49:20 -08:00
Jeff Mitchell
bb45c06371 Sync in latest go-plugin 2018-01-17 11:57:24 -05:00
Paweł Słomka
276ad1f529 Cleanup of deprecated commands in tests, docs (#3788) 2018-01-15 15:19:28 -05:00
Jeff Mitchell
0a2c911c03 Merge branch 'master-oss' into sethvargo/cli-magic 2018-01-10 11:15:49 -05:00
Brian Kassouf
2a3243546a
Update plugin deps to include context changes (#3765)
* Update plugin deps to include context changes

* Fix tests
2018-01-08 12:26:13 -08:00
Jeff Mitchell
d6552a11cc Merge branch 'master-oss' into sethvargo/cli-magic 2018-01-03 14:02:31 -05:00
Jeff Mitchell
ce4b28efa9 Sync in plugin updates 2017-12-21 08:31:20 -05:00
Jeff Mitchell
4f31ee7cc8
Merge branch 'master' into f-nomad 2017-12-18 12:23:39 -05:00
Jeff Mitchell
b0d33e3bc0 Pull in new go-cleanhttp to fix data race 2017-12-18 09:40:22 -05:00
Calvin Leung Huang
d4f17b8f86 Use cleanhttp.PrintablePathCheckHandler to handle non-printable chara… (#3697) 2017-12-15 20:19:37 -05:00
Jeff Mitchell
96b0c31de5
Merge branch 'master' into f-nomad 2017-12-14 16:44:28 -05:00
Jeff Mitchell
3386e8d770
Update go-ldap with our patch for control packets. (#3670)
Fixes #3656
Fixes #3625
Fixes #3402
2017-12-09 10:45:03 -05:00
Nicolas Corrarello
a3df394134
Pull master into f-nomad
Signed-off-by: Nicolas Corrarello <nicolas@corrarello.com>
2017-11-29 15:56:37 +00:00
Jeff Mitchell
61402cf522 Bump deps 2017-11-07 11:57:05 -05:00
Jeff Mitchell
bcc6b3e2b9 Update gocql dep 2017-11-03 17:30:34 -04:00
Jeff Mitchell
d573b4637c Update kube stuff 2017-10-27 16:12:14 -04:00
Jeff Mitchell
6df6041088 Bump deps 2017-10-27 15:06:04 -04:00
Seth Vargo
2243babaa4
Update vendor 2017-10-24 09:39:34 -04:00
Seth Vargo
150e81f3f0
Update vendor libraries for autocomplete and cli 2017-10-24 09:26:43 -04:00
Vishal Nayak
6b9ce0c8c5 Porting identity store (#3419)
* porting identity to OSS

* changes that glue things together

* add testing bits

* wrapped entity id

* fix mount error

* some more changes to core

* fix storagepacker tests

* fix some more tests

* fix mount tests

* fix http mount tests

* audit changes for identity

* remove upgrade structs on the oss side

* added go-memdb to vendor
2017-10-11 10:21:20 -07:00
Vishal Nayak
8e1ffd3135 update deps (#3425)
Update deps for Kubernetes and GCP auth plugins
2017-10-04 22:59:12 -04:00
Chris Hoffman
a393b20cb6 fixing dependencies 2017-10-02 13:47:03 -04:00
Chris Hoffman
44aed8f71a fixing dependencies 2017-10-02 13:46:42 -04:00
Nicolas Corrarello
6a33bf0bf2 Adding further nomad deps 2017-10-02 16:56:39 +01:00
Oluwafemi Sule
f76633c8bc fix spellings errors (#3400) 2017-09-29 11:52:42 -04:00
Nicolas Corrarello
ff4f920917 Adding vendor dir 2017-09-29 14:39:59 +01:00
Brian Kassouf
4fb3f163ee Kubernetes auth (#3350)
* Import the kubernetes credential backend

* Add kubernetes docs

* Escape * characters

* Revert "Import the kubernetes credential backend"

This reverts commit f12627a942.

* Update the vendored directory
2017-09-19 09:27:26 -05:00
Jeff Mitchell
0911358f1a more dep syncing 2017-09-15 21:47:22 -04:00
Jeff Mitchell
da1eb4cf16 Update to new gcp-auth plugin 2017-09-15 15:35:34 -04:00
Jeff Mitchell
3c143bd0d3 Bump deps 2017-09-15 12:44:57 -04:00
Chris Hoffman
3aa68c0034 Adding support for base_url for Okta api (#3316)
* Adding support for base_url for Okta api

* addressing feedback suggestions, bringing back optional group query

* updating docs

* cleaning up the login method

* clear out production flag if base_url is set

* docs updates

* docs updates
2017-09-15 00:27:45 -04:00
Calvin Leung Huang
2fffe60fa0 Update vendored docker deps 2017-09-07 11:05:33 -04:00
Jeff Mitchell
b0e29bb2ec Bump deps 2017-09-05 18:06:47 -04:00
Jeff Mitchell
117de0ab8b Bump gcp plugin dep 2017-09-05 10:56:32 -04:00
Jeff Mitchell
a9509d7017 Bump hclog dep 2017-09-03 12:33:44 -04:00
Chris Hoffman
e54a3dbe47 Updating Okta lib for credential backend (#3245)
* migrating to chrismalek/oktasdk-go Okta library

* updating path docs

* updating bool reference from config
2017-08-30 22:37:21 -04:00
Jeff Mitchell
c14d445de4 Bump go-plugin dep 2017-08-16 11:41:06 -04:00
Jeff Mitchell
27c2386f4a Add gcp auth backend (#3183) 2017-08-16 10:31:34 -04:00
Jeff Mitchell
542b5da8f2 Bump go-plugin version 2017-08-15 16:06:56 -04:00
Jeff Mitchell
f2f0082ba5 Sync go-plugin from upstream 2017-08-07 15:27:03 -04:00
Jeff Mitchell
02ebc5cc81 Update go-plugin to include go-hclog support 2017-08-05 15:34:57 -04:00
Jeff Mitchell
608322b546 Add PROXY protocol support (#3098) 2017-08-02 18:24:12 -04:00
Tony Cai
b3a505cb45 Update vendored library go-hdb (#3097) 2017-08-02 12:53:45 -04:00
Brian Kassouf
dd9cf42ba6 Add Testing Interface to test helpers (#3091)
* Add testing interface

* Add vendored files
2017-08-01 11:07:08 -07:00
Jeff Mitchell
75c8c88c47 Sirupsen->sirupsen 2017-07-25 15:49:10 -04:00
Jeff Mitchell
78afc7ccea Remove uppercase Sirupsen logrus dep 2017-07-25 15:36:14 -04:00
Chris Hoffman
317ae32ca7 CockroachDB Physical Backend (#2713) 2017-07-23 08:54:33 -04:00
Jeff Mitchell
79c47b9433 Bump deps 2017-07-18 10:15:54 -04:00