10305 Commits

Author SHA1 Message Date
Jim Kalafut
bbb9e51d36
Update existing alias metadata during authentication (#6068) 2019-01-23 08:26:50 -08:00
Becca Petrin
516520ab4e swap the forked aliyun sdk for the original (#6024) 2019-01-23 11:24:51 -05:00
Stuart Moore
3b256fe211 Typo fix in gcpckms.go (#6081) 2019-01-23 07:52:31 -05:00
Jeff Mitchell
9747d800ad Sync up code 2019-01-22 17:44:13 -05:00
Jeff Mitchell
114e1c5934 Sync seal testing 2019-01-22 17:23:20 -05:00
Jeff Mitchell
b9a8be5261 Sync logical_system 2019-01-22 17:21:53 -05:00
Jeff Mitchell
67f0b0e328 Update testhelpers to allow passing in custom handler 2019-01-22 17:16:26 -05:00
Clint
79edf2349f
Merge pull request #6070 from gitirabassi/master
Small fixes to docs and indexes for InfluxDB plugin
2019-01-22 12:20:10 -06:00
Thomas L. Kula
8a43842b6d Incredibly tiny comment fix on secret.go (#6078) 2019-01-21 16:57:39 -05:00
Jim Kalafut
fb5eb3509a
Add Sprintf capability to logical.ErrorResponse (#6076)
Roughly 25% of calls to logical.ErrorResponse() include an inner fmt.Sprintf() call.
This PR would simplify these cases:

`return logical.ErrorResponse(fmt.Sprintf("unable to read role '%s'", role))`

  could become

`return logical.ErrorResponse("unable to read role '%s'", role)`

With only a single parameter passed in, behavior is unchanged.
2019-01-18 15:12:38 -08:00
Becca Petrin
794e4e0cb5
Check ec2 instance metadata for region (#6025) 2019-01-18 14:49:24 -08:00
Noelle Daley
20deed3a3d
Add Policy-based Navigation (#5967)
* add permissions service

* start template helper

* match prefixed paths

* gate sidebar links

* land on first page user has access to

* show nav when user first logs in

* clear paths when user logs out

* add tests

* implement feedback

* show all nav items if no policy is found

* update onboarding wizard

* fix some unrelated tests

* add support for namespaces

* gate wizard

* unstage package and lockfile
2019-01-18 14:04:40 -08:00
Riley Lahd
b436df67e9 Consider whole response in UI console when missing auth, data and wrap_info for non writes/deletes (#6073) 2019-01-18 14:02:11 -06:00
Riley Lahd
6b854b5f37 Format array, number and boolean outputs in ui console (Fixes #6054) (#6062)
* format array, number and boolean outputs in ui console

* Remove extra description from console output tests
2019-01-18 10:15:37 -06:00
gitirabassi
3af9be4691 small fixes to docs and indexes 2019-01-18 02:14:57 +01:00
Jim Kalafut
f933956778
Update JWT docs with new jwt_supported_algs parameter (#6069) 2019-01-17 15:27:20 -08:00
Zac Medico
5af9df57ec Makefile: do not execute static-assets in parallel with deps (#6057)
The static-assets target has a dependency on *either* ember-dist or
ember-dist-dev, so these targets must not execute in parallel. Since
this is an either/or dependency, it cannot be expressed as a regular
dependency unless the targets are refactored somehow.

Fixes: 7a312d7c37bb ("Add Makefile/Dockerfile UI bits")
2019-01-17 18:19:54 -05:00
Jeff Mitchell
d5a14878c5 Add missing performance_standby field to API 2019-01-17 18:15:00 -05:00
Jim Kalafut
6a47de40a6
changelog++ 2019-01-17 14:49:16 -08:00
Noelle Daley
181fe4414b
always show copy token button (#6064) 2019-01-17 14:36:54 -08:00
Seth Vargo
d8df88357e Upgrade to new Cloud KMS client libraries (#6051)
* Upgrade to new Cloud KMS client libraries

We recently released the new Cloud KMS client libraries which use GRPC
instead of HTTP. They are faster and look nicer (</opinion>), but more
importantly they drastically simplify a lot of the logic around client
creation, encryption, and decryption. In particular, we can drop all the
logic around looking up credentials and base64-encoding/decoding.

Tested on a brand new cluster (no pre-existing unseal keys) and against
a cluster with stored keys from a previous version of Vault to ensure no
regressions.

* Use the default scopes the client requests

The client already does the right thing here, so we don't need to
surface it, especially since we aren't allowing users to configure it.
2019-01-17 17:27:15 -05:00
Noelle Daley
df51f3b7f2
add link to copy current token from user status bar (#6063) 2019-01-17 11:24:49 -08:00
Jeff Mitchell
0b3dc6d489 Fix typo in comment 2019-01-17 13:28:27 -05:00
Yoko
6e99c837e5 Fixed the broken link (#6052)
* Fixed the broken link

* Fixing the broken link

* Fixes redirect to Tokens guide

The separate redirect within learn.hashicorp.com will be fixed on its own repo.
2019-01-16 17:06:28 -08:00
Chris Hoffman
fdd5896ed5
add code of conduct (#6049) 2019-01-15 17:30:33 -08:00
Jim Kalafut
ea8dacf583
changelog++ 2019-01-15 12:13:24 -08:00
Jim Kalafut
c4f2c8c080
changelog++ 2019-01-15 12:12:03 -08:00
Jim Kalafut
25ac2ad7a6
Fix physical/postgresql to return the full entry key (#6044)
Fixes #6041
2019-01-15 12:06:01 -08:00
Yoko
d5668f47ca
Adding the CLI flag placement info (#6027)
* Adding the CLI flag placement info

* Adding the definition of 'options' and 'args'

* tweaked the wording a little bit

* Added more description in the example

* Added a link to 'Flags' in the doc for options def
2019-01-15 11:24:50 -08:00
Brian Kassouf
b8d470ccc4
changelog++ 2019-01-15 10:56:14 -08:00
Jeff Mitchell
37a1dc9c47
Cut version 1.0.2 v1.0.2 2019-01-15 11:51:39 -05:00
Jeff Mitchell
d4bcc13072 Prepare for 1.0.2 2019-01-15 11:25:11 -05:00
Jeff Mitchell
100de68cfd Fix bound cidrs propagation 2019-01-15 10:55:36 -05:00
Becca Petrin
db2fbc5dd9 Return errs from parsing unknown plugins (#6038) 2019-01-15 10:51:55 -05:00
Jeff Mitchell
de74fae5ee Expose error so warning about not decoding accessors is more useful (#6034) 2019-01-14 09:55:49 -08:00
Jeff Mitchell
766b1b000b Make useCache explicit everywhere in lock manager (#6035)
* Make useCache explicit everywhere in lock manager

This also clears up a case where we could insert into the cache when it
wasn't active

* Address feedback
2019-01-14 08:58:03 -08:00
Jeff Mitchell
566442b622 changelog++ 2019-01-10 20:00:52 -05:00
Jeff Mitchell
e644050e37
Fix a couple of instances where we are using LIST verb (#6026)
* Fix a couple of instances where we are using LIST verb

We specify it for the wrapping lookup function but for broader
compatibility with proxies and such we want to filter it to a GET. In a
couple of places we weren't doing that, so this updates those locations.
2019-01-10 19:57:00 -05:00
Jim Kalafut
e0269c9e2e
Remove unnecessary permission 2019-01-10 16:18:10 -08:00
Brian Kassouf
1f16fb7def
changelog++ 2019-01-10 11:50:46 -08:00
Seth Vargo
41d2e31266 Simplify permission requirements for GCP things (#6012) 2019-01-10 10:05:21 -08:00
Matthew Irish
5e240f8479
changelog++ 2019-01-10 11:23:50 -06:00
Matthew Irish
118ce23f12
UI - only look for data.keys if it's not a queryRecord request on secrets (#6023) 2019-01-10 11:18:29 -06:00
Matthew Irish
8da2e1e9b0
UI - kv save error (#6022)
* don't prevent model save when the model is in the error state on secrets creation

* add test
2019-01-10 10:37:25 -06:00
Dilan Bellinghoven
fe5d47eda1 Add docker-credential-vault-login to Third-Party Tools (#6003)
* Added Docker credential helper to list of Third-Party tools

* website/source/api/relatedtools.html.md: Fixed a typo
2019-01-10 10:46:18 -05:00
Yoko
e71065d851 Allowed characters in paths (#6015) 2019-01-10 10:39:20 -05:00
vishalnayak
1c44ec7839 changelog++ 2019-01-10 10:27:28 -05:00
ncabatoff
4dc2b8358e Instead of using the (nil) err, use the non-nil newCtErr for ctErr. (#5841) 2019-01-09 17:39:58 -08:00
nathan r. hruby
e8a2ac5fce add influx plugin (#6021) 2019-01-09 17:25:40 -08:00
Vishal Nayak
77978055fe
Add option to configure ec2_alias values (#5846)
* Add option to configure ec2_alias values

* Doc updates

* Fix overwriting of previous config value

* s/configEntry/config

* Fix formatting

* Address review feedback

* Address review feedback
2019-01-09 18:28:29 -05:00