293 Commits

Author SHA1 Message Date
Jeff Mitchell
eb3aa20e5d Update CLI coloring 2018-04-06 14:38:56 -04:00
Jeff Mitchell
1a0901d15b Update auth-gcp plugin 2018-04-05 17:34:27 -04:00
Jeff Mitchell
1e2a293768 Bump kv plugin 2018-04-05 14:09:19 -04:00
Chris Hoffman
4061272bc5
update azure plugin (#4266) 2018-04-04 08:02:37 -04:00
Jeff Mitchell
583efb1e20 Update plugins 2018-04-03 22:40:35 -04:00
Jeff Mitchell
3b7f197f55 Bump vkv plugin 2018-04-03 17:09:33 -04:00
Jeff Mitchell
c76628b278 Update vkv plugin 2018-04-03 15:55:57 -04:00
Jeff Mitchell
47e3a03622 Bump vkv plugin 2018-04-03 15:04:33 -04:00
Jeff Mitchell
4dd1a6e23c Interim vkv plugin push 2018-04-03 14:34:36 -04:00
Chris Hoffman
af33ece136 OSS: Adding UI handlers and configurable headers (#390)
* adding UI handlers and UI header configuration

* forcing specific static headers

* properly getting UI config value from config/environment

* fixing formatting in stub UI text

* use http.Header

* case-insensitive X-Vault header check

* fixing var name

* wrap both stubbed and real UI in header handler

* adding test for >1 keys
2018-04-03 09:34:01 -05:00
Becca Petrin
792d219aa9 Move to "github.com/hashicorp/go-hclog" (#4227)
* logbridge with hclog and identical output

* Initial search & replace

This compiles, but there is a fair amount of TODO
and commented out code, especially around the
plugin logclient/logserver code.

* strip logbridge

* fix majority of tests

* update logxi aliases

* WIP fixing tests

* more test fixes

* Update test to hclog

* Fix format

* Rename hclog -> log

* WIP making hclog and logxi love each other

* update logger_test.go

* clean up merged comments

* Replace RawLogger interface with a Logger

* Add some logger names

* Replace Trace with Debug

* update builtin logical logging patterns

* Fix build errors

* More log updates

* update log approach in command and builtin

* More log updates

* update helper, http, and logical directories

* Update loggers

* Log updates

* Update logging

* Update logging

* Update logging

* Update logging

* update logging in physical

* prefixing and lowercase

* Update logging

* Move phyisical logging name to server command

* Fix som tests

* address jims feedback so far

* incorporate brians feedback so far

* strip comments

* move vault.go to logging package

* update Debug to Trace

* Update go-plugin deps

* Update logging based on review comments

* Updates from review

* Unvendor logxi

* Remove null_logger.go
2018-04-02 17:46:59 -07:00
Jeff Mitchell
28ed54fc12 Merge in go-hclog 2018-04-02 16:14:46 -04:00
Jeff Mitchell
665707adb6 Merge in go-hclog 2018-04-02 15:58:31 -04:00
Jeff Mitchell
863b69a75d Update go-hclog and go-plugin 2018-04-02 14:22:52 -04:00
Jeff Mitchell
b6513c1ddc
1.10 Updates (#4218) 2018-03-29 15:32:16 -04:00
Chris Hoffman
86002e4517
updating azure plugin and deps (#4191) 2018-03-23 16:48:05 -04:00
Jeff Mitchell
2ab1468cc5 Remove unneeded dep file 2018-03-21 23:10:34 -04:00
Brian Kassouf
1626803f3f Update kv backend and add some docs (#4182)
* Add kv backend

* Move kv in apha order

* Update kv backend and add some docs
2018-03-21 23:10:05 -04:00
Jeff Mitchell
3c51d97ee9 Add gcp secrets 2018-03-21 23:07:16 -04:00
Jeff Mitchell
8be8f94396 Update kv with existence check 2018-03-21 22:58:11 -04:00
Brian Kassouf
d51dc47070 Add kv backend (#4181) 2018-03-21 22:56:52 -04:00
Chris Hoffman
df723aa4b6
adding azure auth plugin (#4180) 2018-03-21 17:35:31 -04:00
Jeff Mitchell
8644add18b Update hcl 2018-03-20 16:36:37 -04:00
Jeff Mitchell
f105461df5 Push up changes to prep for release 2018-03-20 14:10:53 -04:00
Jeff Mitchell
d7a46c631c Use public forked big package for encrypted_key_storage file until Go 1.10 2018-03-16 10:30:05 -04:00
Jeff Mitchell
2c5d298913 Bump complete. Fixes #4094 2018-03-09 10:43:20 -05:00
Brian Kassouf
5a89b054e8
helper/keysutil: Add a storage implementation that uses policies to encrypt paths (#3989)
* helper/keysutil: Add a policy encrypted path storage

* Add vendored deps

* Fix spelling and paths that start with a /

* Add a key version template to change configure the ciphertext prefix

* Use big.Int for base58 instead of external lib

* Update go requirment to 1.10

* Add a version prefix cache

* Move logic to helper function

* Cache the template parts

* Add a storage prefix to policy

* Add an error if the policy passed in is nil

* Pull in the go1.10 version of the math/big package until we can update
2018-03-08 17:58:50 -08:00
Jeff Mitchell
3d4f4cdc01 Sync plugins 2018-02-26 12:24:04 -05:00
Jeff Mitchell
b175583d28 Bump pkcs7 library version to fix #4024 2018-02-22 20:11:49 -05:00
Jeff Mitchell
e950b77544 Revert "Switch to a forked copy of pkcs7 to fix aws pkcs7 verification error (#4024)"
This reverts commit f75c7dd15784831aef0bd9fda8a230b0a08556f3.
2018-02-22 20:09:19 -05:00
Jeff Mitchell
f75c7dd157
Switch to a forked copy of pkcs7 to fix aws pkcs7 verification error (#4024)
Fixes #4014
2018-02-22 08:49:11 -05:00
Jeff Mitchell
eecb4edf2a Update plugins 2018-02-20 14:15:43 -05:00
Seth Vargo
7af2bdc5a4 Add support for Google Cloud Spanner (#3977) 2018-02-14 20:31:20 -05:00
Jeff Mitchell
dddf5e726e Update Okta dep.
Fixes #3963
2018-02-14 09:38:46 -05:00
Jeff Mitchell
bd8f461f17 Update triton version 2018-02-12 18:27:18 -05:00
Paul Stack
7181749031 Adding Manta Storage Backend (#3720)
This PR adds a new Storage Backend for Triton's Object Storage - Manta

```
make testacc TEST=./physical/manta
==> Checking that code complies with gofmt requirements...
==> Checking that build is using go version >= 1.9.1...
go generate
VAULT_ACC=1 go test -tags='vault' ./physical/manta -v  -timeout 45m
=== RUN   TestMantaBackend
--- PASS: TestMantaBackend (61.18s)
PASS
ok  	github.com/hashicorp/vault/physical/manta	61.210s
```

Manta behaves differently to how S3 works - it has no such concepts of Buckets - it is merely a filesystem style object store

Therefore, we have chosen the approach of when writing a secret `foo` it will actually map (on disk) as foo/.vault_value

The reason for this is because if we write the secret `foo/bar` and then try and Delete a key using the name `foo` then Manta
will complain that the folder is not empty because `foo/bar` exists. Therefore, `foo/bar` is written as `foo/bar/.vault_value`

The value of the key is *always* written to a directory tree of the name and put in a `.vault_value` file.
2018-02-12 18:22:41 -05:00
Jeff Mitchell
1bb6bf2559 Bump deps 2018-02-10 19:29:52 -05:00
Jeff Mitchell
e47c53dcab Update go-plugin 2018-02-06 13:31:13 -05:00
Jeff Mitchell
964bde2349 Update zookeeper dep
Fixes #3896
2018-02-05 11:22:21 -05:00
Jeff Mitchell
43493f2767 Bump deps 2018-01-26 18:51:00 -05:00
Jeff Mitchell
159bf65f66 Sync plugins 2018-01-26 09:04:48 -05:00
Jeff Mitchell
2a04720421 Update plugins 2018-01-24 23:24:16 -05:00
Jeff Mitchell
f4b2a9c2db Update go-plugin dep 2018-01-23 18:18:04 -05:00
Calvin Leung Huang
c3c63313f3
Version protocol switch (#3833)
* Use version to determine plugin protocol to use

* Remove field from ServeOpts

* Fix missing assignment, handle errors

* contraint -> constraint

* Inject the version string from the vault side

* Fix the version check

* Add grpc support check to database plugins

* Default to use grpc unless missing env var or fail on contraint check

* Add GRPCSupport test

* Add greater than test case

* Add go-version dep
2018-01-23 17:29:26 -05:00
Jeff Mitchell
e1028c644f Add centrify plugin as builtin 2018-01-19 06:03:33 -05:00
Jeff Mitchell
07893b2659 Add gcp and kubernetes back now that they're updated 2018-01-19 05:56:34 -05:00
Brian Kassouf
8142b42d95 Add context to storage backends and wire it through a lot of places (#3817) 2018-01-19 01:44:44 -05:00
Jeff Mitchell
2864fbd697 bump go-plugin 2018-01-18 16:58:03 -05:00
Brian Kassouf
03f6108822
gRPC Backend Plugins (#3808)
* Add grpc plugins

* Add grpc plugins

* Translate wrap info to/from proto

* Add nil checks

* Fix nil marshaling errors

* Provide logging through the go-plugin logger

* handle errors in the messages

* Update the TLS config so bidirectional connections work

* Add connectivity checks

* Restart plugin and add timeouts where context is not availible

* Add the response wrap data into the grpc system implementation

* Add leaseoptions to pb.Auth

* Add an error translator

* Add tests for translating the proto objects

* Fix rename of function

* Add tracing to plugins for easier debugging

* Handle plugin crashes with the go-plugin context

* Add test for grpcStorage

* Add tests for backend and system

* Bump go-plugin for GRPCBroker

* Remove RegisterLicense

* Add casing translations for new proto messages

* Use doneCtx in grpcClient

* Use doneCtx in grpcClient

* s/shutdown/shut down/
2018-01-18 13:49:20 -08:00
Jeff Mitchell
bb45c06371 Sync in latest go-plugin 2018-01-17 11:57:24 -05:00