mirrors/vault
1
0
Fork 0
mirror of https://github.com/hashicorp/vault.git synced 2025-08-20 22:21:09 +02:00
Code Issues Projects Releases Wiki Activity
9,692 Commits 2,844 Branches 445 Tags
Commit Graph

293 Commits

Author SHA1 Message Date
Jeff Mitchell
a8b3bc9301
Update to latest etcd and use the new repository packages (#6087) 
This will be necessary for go mod work

Additionally, the srv api has changed. This adapts to it.
 2019-01-23 14:35:03 -05:00
Becca Petrin
516520ab4e swap the forked aliyun sdk for the original (#6024) 2019-01-23 11:24:51 -05:00
Jeff Mitchell
d4bcc13072 Prepare for 1.0.2 2019-01-15 11:25:11 -05:00
Giacomo Tirabassi
726aa02038 Influxdb secret engine built-in plugin (#5924) 
* intial work for influxdb secret plugin

* fixed typo

* added comment

* added documentation

* added tests

* fixed tests

* added vendoring

* minor testing issue with hardcoded values

* minor fixes
 2019-01-08 17:26:16 -08:00
Julien Blache
29471c88e9 FoundationDB backend TLS support and housekeeping (#5800) 
* Fix typo in documentation

* Update fdb-go-install.sh for new release tags

* Exclude FoundationDB bindings from vendoring, delete vendored copy

FoundationDB bindings are tightly coupled to the server version and
client library version used in a specific deployment. Bindings need
to be installed using the fdb-go-install.sh script, as documented in
the foundationdb backend documentation.

* Add TLS support to FoundationDB backend

TLS support appeared in FoundationDB 5.2.4, raising the minimum API version
for TLS-aware FoundationDB code to 520.

* Update documentation for FoundationDB TLS support
 2019-01-08 09:01:44 -08:00
Jeff Mitchell
18e014ee93 Update plugins 2018-12-14 10:42:11 -05:00
Jeff Mitchell
1bc959ad5a CL and plugin updates 2018-12-03 11:45:02 -05:00
Brian Kassouf
0dc09be3e1 Update plugins 2018-11-20 11:43:38 -08:00
Brian Kassouf
89b83086cd release prep 2018-11-12 11:10:47 -08:00
Vishal Nayak
ba67172f0d
Update KV dependency (#5707) 2018-11-06 14:33:21 -05:00
Jim Kalafut
2d6bdecb55
Update kv dependency (#5700) 2018-11-05 21:42:44 -08:00
Nicolas Corrarello
53ad302a31 Adding support for Consul 1.4 ACL system (#5586) 
* Adding support for Consul 1.4 ACL system

* Working tests

* Fixed logic gate

* Fixed logical gate that evaluate empty policy or empty list of policy names

* Ensure tests are run against appropiate Consul versions

* Running tests against official container with a 1.4.0-rc1 tag

* policies can never be nil (as even if it is empty will be an empty array)

* addressing feedback, refactoring tests

* removing cast

* converting old lease field to ttl, adding max ttl

* cleanup

* adding missing test

* testing wrong version

* adding support for local tokens

* addressing feedback
 2018-11-02 10:44:12 -04:00
Jeff Mitchell
cb58182900 Update jwt to pull in groups claim delimiter pattern 2018-10-31 16:04:39 -04:00
Jim Kalafut
a92d999f08
Update Azure Secrets plugin (#5606) 2018-10-25 12:06:55 -07:00
Jeff Mitchell
5aa4dbbc9b Check in some generated protos needed by non-native archs 2018-10-23 12:46:47 -04:00
Chris Hoffman
107ba2ab9a adding gcpkms secrets engine (#784) 2018-10-22 23:39:25 -07:00
Matthew Irish
8c78bb54b2 Merge branch 'oss-master' into 1.0-beta-oss 2018-10-19 20:40:36 -05:00
Jim Kalafut
70f71103e6
Update Azure Secrets plugin (#5533) 2018-10-19 16:15:31 -07:00
Calvin Leung Huang
3d1f0d76c0
[Review Only] Autoseal OSS port (#757) 
* Port awskms autoseal

* Rename files

* WIP autoseal

* Fix protobuf conflict

* Expose some structs to properly allow encrypting stored keys

* Update awskms with the latest changes

* Add KeyGuard implementation to abstract encryption/decryption of keys

* Fully decouple seal.Access implementations from sealwrap structs

* Add extra line to proto files, comment update

* Update seal_access_entry.go

* govendor sync

* Add endpoint info to configureAWSKMSSeal

* Update comment

* Refactor structs

* Update make proto

* Remove remove KeyGuard, move encrypt/decrypt to autoSeal

* Add rest of seals, update VerifyRecoveryKeys, add deps

* Fix some merge conflicts via govendor updates

* Rename SealWrapEntry to EncryptedBlobInfo

* Remove barrier type upgrade check in oss

* Add key to EncryptedBlobInfo proto

* Update barrierTypeUpgradeCheck signature
 2018-10-19 14:43:57 -07:00
Brian Kassouf
d1401a83c4
Update deps (#5521) 2018-10-15 15:25:08 -07:00
Brian Kassouf
ce041c47e4
Update deps (#5520) 2018-10-15 14:36:55 -07:00
Becca Petrin
e7a0452736 vendor the desired version of go.uuid (#5458) 2018-10-03 15:30:05 -07:00
Brian Kassouf
b6ca59f0b4
Fix build (#5457) 2018-10-03 14:53:08 -07:00
Brian Kassouf
f2233d7a1c
Update Deps (#5454) 2018-10-03 09:55:26 -07:00
Brian Kassouf
38f9c65039 Update plugins 2018-10-02 11:14:15 -07:00
Becca Petrin
11abcec826 point at a fork of aliyun-oss-go-sdk (#5358) 2018-10-01 10:05:08 -07:00
Jeff Mitchell
9add4f0519
Add lz4 to compressutil (#5403) 2018-09-26 09:20:33 -05:00
Becca Petrin
d76e67afc7
add alicloud secrets engine (#5352) 2018-09-19 08:42:28 -07:00
Clint
f39bafbf9c
Translate AWS Rate limiting errors to 502 errors (#5270) 
* Initial implemntation of returning 529 for rate limits

- bump aws iam and sts packages to v1.14.31 to get mocking interface
- promote the iam and sts clients to the aws backend struct, for mocking in tests
- this also promotes some functions to methods on the Backend struct, so
  that we can use the injected client

Generating creds requires reading config/root for credentials to contact
IAM. Here we make pathConfigRoot a method on aws/backend so we can clear
the clients on successful update of config/root path. Adds a mutex to
safely clear the clients

* refactor locking and unlocking into methods on *backend

* refactor/simply the locking

* check client after grabbing lock
 2018-09-18 15:26:06 -05:00
Jeff Mitchell
a7dd669615 Bump for release 2018-09-05 13:17:37 -04:00
Becca Petrin
d69c674c8e Add AliCloud auth to the Vault Agent (#5179) 2018-09-05 11:56:30 -04:00
Jeff Mitchell
dc86fdef00 Sync plugin updates 2018-08-28 02:39:13 -04:00
Brian Kassouf
f085e7e0f9
Update kv plugin (#5187) 2018-08-25 14:56:40 -07:00
Jeff Mitchell
be0ed63f03 Get reflect2 into vendoring 2018-08-22 16:11:51 -04:00
Jeff Mitchell
750233fdb2 Add ali deps to vendor 2018-08-22 15:39:18 -04:00
Jim Kalafut
63abfec999
Update Azure Secrets plugin (#5154) 2018-08-21 21:05:05 -07:00
Jeff Mitchell
675bf7a08e Pull in go-ldap update that fixes comparison with AD 2018-08-20 18:16:47 -04:00
Jeff Mitchell
d52bddebd9 Sync plugins 2018-08-16 16:21:38 -04:00
Jim Kalafut
1b8b425e82 Initial import of Azure Secrets (#5120) 
* Initial import of Azure Secrets

* Update vendor folder
 2018-08-16 12:18:06 -07:00
Becca Petrin
d3f8eabb9b Add alicloud auth (#5123) 
* add alicloud auth commands

* add dependencies
 2018-08-16 12:17:49 -07:00
Nándor István Krácser
23d89841d7 Alibaba Object Storage support (#4783) 2018-08-13 17:03:24 -04:00
Brian Kassouf
cdc9b357e7
Update k8s auth (#5059) 2018-08-07 10:45:40 -07:00
Joel Thompson
f7150ae74c Vendor AWS ARN parser (#5048) 
This adds the AWS ARN parser into the vendor as suggested by
https://github.com/hashicorp/vault/pull/4360#discussion_r186744987
 2018-08-06 09:51:06 -07:00
Jim Kalafut
45341f911c Update GCP auth plugin (#5043) 
Fixes #5037
 2018-08-03 14:56:02 -07:00
Brian Kassouf
f8b3319546
Update ad plugin (#5008) 2018-07-27 14:52:38 -06:00
Jeff Mitchell
267e929553 Update plugins 2018-07-24 22:19:38 -04:00
Chris Hoffman
59a4145aa9
updating azure plugin (#4989) 2018-07-24 22:13:23 -04:00
Jeff Mitchell
903ab7c485
VSI (#4985) 2018-07-24 22:02:27 -04:00
Jim Kalafut
255b23156f
Update Azure auth plugin (#4978) 2018-07-23 15:00:46 -07:00
Chris Hoffman
3ba265cf6a
updating azure auth plugin and docs (#4975) 2018-07-23 10:00:44 -04:00