9692 Commits

Author SHA1 Message Date
Jeff Mitchell
9a287ed950 changelog++ 2018-07-23 12:45:49 -04:00
Jeff Mitchell
24b032aad5
Pass identity metadata through to plugins (#4967)
It's not obvious why this should be secret, and if it were considered
secret, when and what anything would ever be allowed to access it.
Likely the right way to tie secret values to particular
entities/aliases/groups would be to use the upcoming templated ACL
feature.
2018-07-23 12:45:06 -04:00
Chris Hoffman
20ea32fa9a
changelog++ 2018-07-23 10:02:22 -04:00
Chris Hoffman
3ba265cf6a
updating azure auth plugin and docs (#4975) 2018-07-23 10:00:44 -04:00
Jim Kalafut
ecc622ac43
Add FoundationDB link to sidebar 2018-07-20 20:10:52 -07:00
Matthew Irish
eb4ad42eba
UI unauthenticated auth method login (#4972)
* fix unauthenticated auth form
* make sure to redirect if you're already authed
* add the ability to build in a welcome message at build time
2018-07-20 16:48:25 -05:00
Jeff Mitchell
4c971049e0
Properly watch quit context in expireID instead of locking first (#4970) 2018-07-20 17:00:09 -04:00
Yoko
4f9757e53e
Git repo folder name changed (#4969) 2018-07-20 11:46:12 -07:00
Jeff Mitchell
a1c8cca970 changelog++ 2018-07-20 14:11:31 -04:00
Brian Kassouf
e3dc93c50c plugins: Allow the server to receive large messages (#4958) 2018-07-20 14:11:00 -04:00
Olivier Lemasle
f09c365ef1 State in docs that FoundationDB backend is community supported (#4964) 2018-07-20 09:59:13 -04:00
Peter Vandenabeele
9627d55134 Fix small typo in Vault website documentation (#4962) 2018-07-20 09:57:16 -04:00
Jeff Mitchell
7de6b81bc5 changelog++ 2018-07-20 00:48:59 -04:00
Brian Shumate
4bd42b4e3a Add missing telemetry metrics (#4785)
* Add missing telemetry metrics

- Add merkle related telemetry
- Add WAL related telemetry

* additional wal metrics

* Use correct metrics naming
2018-07-19 18:36:55 -04:00
Chris Hoffman
472c0c83fa
Fixing formatting 2018-07-19 10:36:09 -04:00
Chris Hoffman
140776734b
Adding information on required azure permissions (#4956) 2018-07-19 10:24:55 -04:00
Jeff Mitchell
bdc0ddbb5e Update go-retryablehttp and affected deps 2018-07-19 08:50:18 -04:00
John Naulty Jr
1caa13c335 fix Issue #4952 static-secrets small typo (#4953) 2018-07-18 22:36:47 -07:00
Matthew Irish
d2979447a9
changelog++ 2018-07-18 21:14:07 -05:00
Matthew Irish
8a8c932ea2
UI - control groups (#4947)
* add routes for control groups in tools, settings, access (#4718)
* UI control group - storage, request, authorization, and unwrapping (#4899)
* UI control groups config (#4927)
2018-07-18 20:59:04 -05:00
Matthew Irish
7af1c09e72
UI: ember-auto-import (#4933)
* add auto-import
* remove imports that we can and get rid of autosize shim
* remove items from eslinrc
* import base64js in shamir key
2018-07-18 09:13:39 -05:00
Tomohisa Oda
c6fd9f5c90 add sequelize-vault to third-party tools (#4945) 2018-07-17 21:45:37 -07:00
Michael Russell
76e535e5ea Make the SSH executable path configurable (#4937)
Making this configurable is useful for windows users which may not be
using the default `ssh` executable. It also means that users can point to a
specify SSH executable if multiple are available.
2018-07-17 17:47:07 -07:00
Becca Petrin
d78934de05 Disallow negative TypeDurationSecond (#4910)
* add mount ttl helper

* disallow negative TypeDurationSecond values
2018-07-17 17:46:03 -07:00
Yoko
c86840163a
Updated - Secure Introduction to Vault Clients guide (#4944)
* Incorporated Armon's feedback

* Added a diagram
2018-07-17 15:54:48 -07:00
Jeff Mitchell
22658a7d92 Fix context shadowing during radius login (#4941)
Fixes #4938
2018-07-17 11:17:07 -07:00
Becca Petrin
e6bdfa288a fix possible panic (#4942) 2018-07-17 11:15:28 -07:00
Jeff Mitchell
35566d31d5
Two small items: (#4934)
1) Disable MaxRetries in test cluster clients. We generally want to fail
as fast as possible in tests so adding unpredictable timing in doesn't
help things, especially if we're timing sensitive in the test.

2) EquivalentPolicies is supposed to return true if only one set
contains `default` and the other is empty, but if one set was nil
instead of simply a zero length slice it would always return false. This
means that renewing against, say, `userpass` when not actually
specifying any user policies would always fail.
2018-07-17 01:23:26 -04:00
Yoko
838a449c9b
Secure Introduction to Vault Clients Guide (#4871)
* WIP

* WIP - Secure Intro Guide

* WIP secure intro guide

* WIP Secure Intro Guide

* WIP Secure Intro Guide

* WIP Secure Intro Guide
2018-07-16 15:17:52 -07:00
Jeff Mitchell
199a1955a6 Remove defer of atomic add to see if that fixes data race 2018-07-16 11:34:47 -04:00
Jeff Mitchell
e7036a3896 changelog++ 2018-07-16 10:56:19 -04:00
Julien Blache
e59d19325c FoundationDB physical backend (#4900) 2018-07-16 10:18:09 -04:00
Ram Nadella
e6a4d35bb3 Fix environment mismatch in MySQL cert step (#4835) 2018-07-16 10:13:44 -04:00
Jeff Mitchell
ae68d53d0f changelog++ 2018-07-16 10:12:40 -04:00
Michael Russell
e32ba81b52 Allow vault ssh to work with single ssh args like -v (#4825) 2018-07-16 10:11:56 -04:00
Richie Yeung
5d26376460 Fix empty string check for password (#4923) 2018-07-13 12:35:06 -07:00
Brian Kassouf
146a6844e1
Don't shutdown if we lose leadership during lease restoration (#4924)
* Don't shutdown if we lose leadership during lease restoration

* Update comment
2018-07-13 11:30:08 -07:00
zhogov
9c258c7921 Fixed parsing of environment variables (#4925) 2018-07-13 10:45:35 -07:00
Seth Vargo
c50881b274 Add plugin CLI for interacting with the plugin catalog (#4911)
* Add 'plugin list' command

* Add 'plugin register' command

* Add 'plugin deregister' command

* Use a shared plugin helper

* Add 'plugin read' command

* Rename to plugin info

* Add base plugin for help text

* Fix arg ordering

* Add docs

* Rearrange to alphabetize

* Fix arg ordering in example

* Don't use "sudo" in command description
2018-07-13 10:35:08 -07:00
Calvin Leung Huang
80a0d56361 changelog++ 2018-07-13 11:39:42 -04:00
Jeff Mitchell
68cb5f6474 changelog++ 2018-07-13 11:05:13 -04:00
Seth Vargo
be84781133 Don't use activeContext for standby/leader cancelation (#4919)
Move cancelation to after cleanup

Fixes GH-4915
2018-07-13 11:04:23 -04:00
Seth Vargo
1ce2513920 Use context from stdlib in google physical backends (#4922)
* Use context from stdlib in google physical backends

* Do not prefix logs (Vault will do it)
2018-07-13 11:00:38 -04:00
Jeff Mitchell
11c8eb896f Change x/net context package to go stdlib 2018-07-13 10:59:34 -04:00
Jeff Mitchell
f85efad941 Remove unnecessary log scoping in some physical backends 2018-07-13 10:57:30 -04:00
Jeff Mitchell
9da2de14ce Bind locally to opcount to try to make race detector happy 2018-07-13 10:33:42 -04:00
Jeff Mitchell
49aa740209 Remove some unnecessary default statements 2018-07-13 09:33:26 -04:00
Jeff Mitchell
94c5b6ca96 changelog++ 2018-07-13 09:33:01 -04:00
dmicanzerofox
6559f5fe76 PKI Tidy Revocation List optionally Tidy Revoked Certs that are Unexpired (#4916) 2018-07-13 09:32:32 -04:00
Matthew Irish
bd9ba940ef
UI - disable JSON toggle when data is not only strings (#4913)
* disable JSON toggle when data is not only strings
* add tests
2018-07-12 21:35:58 -05:00