Jeff Mitchell
9a287ed950
changelog++
2018-07-23 12:45:49 -04:00
Jeff Mitchell
24b032aad5
Pass identity metadata through to plugins ( #4967 )
...
It's not obvious why this should be secret, and if it were considered
secret, when and what anything would ever be allowed to access it.
Likely the right way to tie secret values to particular
entities/aliases/groups would be to use the upcoming templated ACL
feature.
2018-07-23 12:45:06 -04:00
Chris Hoffman
20ea32fa9a
changelog++
2018-07-23 10:02:22 -04:00
Chris Hoffman
3ba265cf6a
updating azure auth plugin and docs ( #4975 )
2018-07-23 10:00:44 -04:00
Jim Kalafut
ecc622ac43
Add FoundationDB link to sidebar
2018-07-20 20:10:52 -07:00
Matthew Irish
eb4ad42eba
UI unauthenticated auth method login ( #4972 )
...
* fix unauthenticated auth form
* make sure to redirect if you're already authed
* add the ability to build in a welcome message at build time
2018-07-20 16:48:25 -05:00
Jeff Mitchell
4c971049e0
Properly watch quit context in expireID instead of locking first ( #4970 )
2018-07-20 17:00:09 -04:00
Yoko
4f9757e53e
Git repo folder name changed ( #4969 )
2018-07-20 11:46:12 -07:00
Jeff Mitchell
a1c8cca970
changelog++
2018-07-20 14:11:31 -04:00
Brian Kassouf
e3dc93c50c
plugins: Allow the server to receive large messages ( #4958 )
2018-07-20 14:11:00 -04:00
Olivier Lemasle
f09c365ef1
State in docs that FoundationDB backend is community supported ( #4964 )
2018-07-20 09:59:13 -04:00
Peter Vandenabeele
9627d55134
Fix small typo in Vault website documentation ( #4962 )
2018-07-20 09:57:16 -04:00
Jeff Mitchell
7de6b81bc5
changelog++
2018-07-20 00:48:59 -04:00
Brian Shumate
4bd42b4e3a
Add missing telemetry metrics ( #4785 )
...
* Add missing telemetry metrics
- Add merkle related telemetry
- Add WAL related telemetry
* additional wal metrics
* Use correct metrics naming
2018-07-19 18:36:55 -04:00
Chris Hoffman
472c0c83fa
Fixing formatting
2018-07-19 10:36:09 -04:00
Chris Hoffman
140776734b
Adding information on required azure permissions ( #4956 )
2018-07-19 10:24:55 -04:00
Jeff Mitchell
bdc0ddbb5e
Update go-retryablehttp and affected deps
2018-07-19 08:50:18 -04:00
John Naulty Jr
1caa13c335
fix Issue #4952 static-secrets small typo ( #4953 )
2018-07-18 22:36:47 -07:00
Matthew Irish
d2979447a9
changelog++
2018-07-18 21:14:07 -05:00
Matthew Irish
8a8c932ea2
UI - control groups ( #4947 )
...
* add routes for control groups in tools, settings, access (#4718 )
* UI control group - storage, request, authorization, and unwrapping (#4899 )
* UI control groups config (#4927 )
2018-07-18 20:59:04 -05:00
Matthew Irish
7af1c09e72
UI: ember-auto-import ( #4933 )
...
* add auto-import
* remove imports that we can and get rid of autosize shim
* remove items from eslinrc
* import base64js in shamir key
2018-07-18 09:13:39 -05:00
Tomohisa Oda
c6fd9f5c90
add sequelize-vault to third-party tools ( #4945 )
2018-07-17 21:45:37 -07:00
Michael Russell
76e535e5ea
Make the SSH executable path configurable ( #4937 )
...
Making this configurable is useful for windows users which may not be
using the default `ssh` executable. It also means that users can point to a
specify SSH executable if multiple are available.
2018-07-17 17:47:07 -07:00
Becca Petrin
d78934de05
Disallow negative TypeDurationSecond
( #4910 )
...
* add mount ttl helper
* disallow negative TypeDurationSecond values
2018-07-17 17:46:03 -07:00
Yoko
c86840163a
Updated - Secure Introduction to Vault Clients guide ( #4944 )
...
* Incorporated Armon's feedback
* Added a diagram
2018-07-17 15:54:48 -07:00
Jeff Mitchell
22658a7d92
Fix context shadowing during radius login ( #4941 )
...
Fixes #4938
2018-07-17 11:17:07 -07:00
Becca Petrin
e6bdfa288a
fix possible panic ( #4942 )
2018-07-17 11:15:28 -07:00
Jeff Mitchell
35566d31d5
Two small items: ( #4934 )
...
1) Disable MaxRetries in test cluster clients. We generally want to fail
as fast as possible in tests so adding unpredictable timing in doesn't
help things, especially if we're timing sensitive in the test.
2) EquivalentPolicies is supposed to return true if only one set
contains `default` and the other is empty, but if one set was nil
instead of simply a zero length slice it would always return false. This
means that renewing against, say, `userpass` when not actually
specifying any user policies would always fail.
2018-07-17 01:23:26 -04:00
Yoko
838a449c9b
Secure Introduction to Vault Clients Guide ( #4871 )
...
* WIP
* WIP - Secure Intro Guide
* WIP secure intro guide
* WIP Secure Intro Guide
* WIP Secure Intro Guide
* WIP Secure Intro Guide
2018-07-16 15:17:52 -07:00
Jeff Mitchell
199a1955a6
Remove defer of atomic add to see if that fixes data race
2018-07-16 11:34:47 -04:00
Jeff Mitchell
e7036a3896
changelog++
2018-07-16 10:56:19 -04:00
Julien Blache
e59d19325c
FoundationDB physical backend ( #4900 )
2018-07-16 10:18:09 -04:00
Ram Nadella
e6a4d35bb3
Fix environment mismatch in MySQL cert step ( #4835 )
2018-07-16 10:13:44 -04:00
Jeff Mitchell
ae68d53d0f
changelog++
2018-07-16 10:12:40 -04:00
Michael Russell
e32ba81b52
Allow vault ssh to work with single ssh args like -v ( #4825 )
2018-07-16 10:11:56 -04:00
Richie Yeung
5d26376460
Fix empty string check for password ( #4923 )
2018-07-13 12:35:06 -07:00
Brian Kassouf
146a6844e1
Don't shutdown if we lose leadership during lease restoration ( #4924 )
...
* Don't shutdown if we lose leadership during lease restoration
* Update comment
2018-07-13 11:30:08 -07:00
zhogov
9c258c7921
Fixed parsing of environment variables ( #4925 )
2018-07-13 10:45:35 -07:00
Seth Vargo
c50881b274
Add plugin CLI for interacting with the plugin catalog ( #4911 )
...
* Add 'plugin list' command
* Add 'plugin register' command
* Add 'plugin deregister' command
* Use a shared plugin helper
* Add 'plugin read' command
* Rename to plugin info
* Add base plugin for help text
* Fix arg ordering
* Add docs
* Rearrange to alphabetize
* Fix arg ordering in example
* Don't use "sudo" in command description
2018-07-13 10:35:08 -07:00
Calvin Leung Huang
80a0d56361
changelog++
2018-07-13 11:39:42 -04:00
Jeff Mitchell
68cb5f6474
changelog++
2018-07-13 11:05:13 -04:00
Seth Vargo
be84781133
Don't use activeContext for standby/leader cancelation ( #4919 )
...
Move cancelation to after cleanup
Fixes GH-4915
2018-07-13 11:04:23 -04:00
Seth Vargo
1ce2513920
Use context from stdlib in google physical backends ( #4922 )
...
* Use context from stdlib in google physical backends
* Do not prefix logs (Vault will do it)
2018-07-13 11:00:38 -04:00
Jeff Mitchell
11c8eb896f
Change x/net context package to go stdlib
2018-07-13 10:59:34 -04:00
Jeff Mitchell
f85efad941
Remove unnecessary log scoping in some physical backends
2018-07-13 10:57:30 -04:00
Jeff Mitchell
9da2de14ce
Bind locally to opcount to try to make race detector happy
2018-07-13 10:33:42 -04:00
Jeff Mitchell
49aa740209
Remove some unnecessary default statements
2018-07-13 09:33:26 -04:00
Jeff Mitchell
94c5b6ca96
changelog++
2018-07-13 09:33:01 -04:00
dmicanzerofox
6559f5fe76
PKI Tidy Revocation List optionally Tidy Revoked Certs that are Unexpired ( #4916 )
2018-07-13 09:32:32 -04:00
Matthew Irish
bd9ba940ef
UI - disable JSON toggle when data is not only strings ( #4913 )
...
* disable JSON toggle when data is not only strings
* add tests
2018-07-12 21:35:58 -05:00