9692 Commits

Author SHA1 Message Date
Jeff Mitchell
1b57fc53da Update plugins 2018-06-05 22:57:35 -04:00
Jeff Mitchell
4bcbc5a784 Transit convergent v3 2018-06-05 18:53:39 -04:00
Vishal Nayak
818218637c approle: Fix role name case sensitivity issue 2018-06-05 18:53:27 -04:00
Jeff Mitchell
cc003bb239 Offline token revocation fix 2018-06-05 18:53:27 -04:00
Chris Hoffman
74e1134a91
changelog++ 2018-06-05 16:57:46 -04:00
Jeff Mitchell
534eac25e4 changelog++ 2018-06-05 15:27:34 -04:00
Jeff Mitchell
2de2a30232
Fix swallowed err from gcs close calls (#4706) 2018-06-05 15:27:02 -04:00
Jeff Mitchell
4e71de3393
Fix panic if passing "rules" via sys/policies/acl (#4705) 2018-06-05 13:01:55 -04:00
LeSuisse
8df30fc414 Update usage of deprecated commands rekey and rotate in the documentation (#4703) 2018-06-05 12:37:26 -04:00
Martin
3ecfdc5c26 Make travis file usable by forks (#4702) 2018-06-05 12:36:46 -04:00
madalynrose
1b785835b7 trim extensions from filename when uploading a policy file (#4693) 2018-06-05 10:30:32 -05:00
Jeff Mitchell
1a969ce925 changelog++ 2018-06-05 11:23:52 -04:00
Jeff Mitchell
2b374b27b5
Return generic messages if pre-login ldap operations fail (#4700)
This avoids leaking any information about valid usernames.
2018-06-05 11:23:10 -04:00
Eli Oxman
d6efc1cff6 Add async python client to docs (#4698) 2018-06-05 10:23:56 -04:00
Nándor István Krácser
76be6ce5e6 Fix VAULT_LOG_LEVEL in docs (#4696) 2018-06-05 10:23:32 -04:00
Jeff Mitchell
1865609432 changelog++ 2018-06-04 23:19:22 -04:00
Marcin Wielgoszewski
a8f343c32e Add support for x.509 Name Serial Number attribute in subject of certificates (#4694) 2018-06-04 23:18:39 -04:00
Becca Petrin
063d9ed756 be more explicit about names (#4695) 2018-06-04 21:34:17 -04:00
Jeff Mitchell
89d9253144 changelog++ 2018-06-04 19:42:19 -04:00
Jeff Mitchell
58ac805f2e
Do some best-effort cleanup in file backend (#4684)
* Do some best-effort cleanup in file backend

If put results in an encoding error and after the file is closed we
detect it's zero bytes, it could be caused by an out of space error on
the disk since file info is often stored in filesystem metadata with
reserved space. This tries to detect that scenario and perform
best-effort cleanup. We only do this on zero length files to ensure that
if an encode fails to write but the system hasn't already performed
truncation, we leave the existing data alone.

Vault should never write a zero-byte file (as opposed to a zero-byte
value in the encoded JSON) so if this case is hit it's always an error.

* Also run a check on Get
2018-06-04 19:41:36 -04:00
Becca Petrin
99570d9438 update ad dependency (#4692) 2018-06-04 15:09:41 -04:00
Matthew Irish
688091c2df fix route name (#4690) 2018-06-04 14:38:35 -04:00
Chris Hoffman
3b1ade706c
adding option go_package to protos (#4687)
* adding option go_package to protos

* switching proto output dir to relative paths
2018-06-04 10:19:26 -04:00
Chris Hoffman
deb2904f46
changelog++ 2018-06-03 20:50:57 -04:00
Chris Hoffman
51bc3d8891
Add entity information request to system view (#4681)
* Add entity information request to system view

* fixing a few comments

* sharing types between plugin and logical

* sharing types between plugin and logical

* fixing output directory for proto

* removing extra replacement

* adding mount type lookup

* empty entities return nil instead of error

* adding some comments
2018-06-03 20:48:12 -04:00
Jeff Mitchell
bacd506163
Update CHANGELOG.md 2018-06-03 19:33:00 -04:00
Becca Petrin
12f4d619ef strip checking cidrs on renewals (#4682) 2018-06-03 09:22:54 -04:00
Matthew Irish
7de8cfd808
put modal over the nav (#4685) 2018-06-02 21:34:50 -05:00
Jim Kalafut
5d973885b4
Add TypeLowerCaseString (#4683) 2018-06-01 18:30:59 -07:00
Brian Kassouf
dce21be314
Update CHANGELOG.md 2018-06-01 15:33:06 -07:00
Matthew Irish
f046445dac
UI - console refresh (#4679)
* add router service polyfill
* add refresh command
* move async code into ember-concurrency task and implement refresh that way
* use ember-concurrency derived state to show a loading spinner when the task is running
* scroll after appending to log too
2018-06-01 17:18:31 -05:00
Calvin Leung Huang
5b644e99a4
Use same handlers for sys policy and policies endpoints (#4677)
* Use same handlers for sys policy and policies endpoints

* Remove fmt.Println
2018-06-01 12:11:33 -04:00
Jeff Mitchell
013e2167dd
Show mount accessors in normal secrets/auth list commands (#4676)
This makes them significantly easier to find/consume
2018-06-01 10:20:09 -04:00
Jeff Mitchell
e3f91205f1 changelog++ 2018-06-01 09:57:30 -04:00
Michael Russell
7090348c9f Only append the UserKnownHostsFile ssh flag when required (#4674)
Don't set a default value for the UserKnownHostsFile flag.
Only append `-o UserKnownHostsFile` to the ssh command if it
has been specified by the user or vault ssh has set it based on another
flag (such as flagHostKeyMountPoint)

Fixes https://github.com/hashicorp/vault/issues/4672
2018-06-01 09:56:22 -04:00
Jeff Mitchell
75aa8df3d9 changelog++ 2018-06-01 09:16:49 -04:00
Michael Russell
b48a8e5309 Use hostname instead of the IP when running the actual ssh command (#4673)
This is implementing the same fix that was added for the CA mode for vault
ssh in https://github.com/hashicorp/vault/pull/3922
Using the IP address caused `Host` entries in the ssh_config to not
match anymore meaning you would need to hardcode all of your IP
addresses in your ssh config instead of using DNS to connect to hosts
2018-06-01 09:16:12 -04:00
Jeff Mitchell
7783b23b17 changelog++ 2018-06-01 09:14:57 -04:00
Alex Ionescu
33ec066278 Custom extended key usage for PKI. (#4667)
Custom extended key usage for PKI
2018-06-01 09:13:54 -04:00
Jeff Mitchell
1d4d302bfa
Clean up request logic and use retryable's more efficient handling (#4670) 2018-06-01 09:12:43 -04:00
Matthew Irish
2b7440524e
UI - don't re-throw error when fetching features (#4669) 2018-05-31 16:22:49 -05:00
Jeff Mitchell
86d4b3291c Bump retryablehttp dep 2018-05-31 17:14:04 -04:00
Brian Kassouf
0ff648adb6
UI: Trim trailing slashes to avoid redirects (#4668) 2018-05-31 12:52:43 -07:00
Jim Kalafut
76e774d6cc
Add gzip compression to UI static content responses (#4664) 2018-05-31 09:42:08 -07:00
vishalnayak
56f000960a changelog++ 2018-05-31 10:20:33 -04:00
Vishal Nayak
9deb679926
Passthrough EntityID to backends (#4663)
* passthrough entity id

* address review feedback
2018-05-31 10:18:34 -04:00
Brian Kassouf
0740f62d3b
Cleanup core.go and break out HA functionality (#4661) 2018-05-30 17:30:50 -07:00
Matthew Irish
20d36ab2a3
changelog++ 2018-05-30 12:29:42 -05:00
Matthew Irish
af1ad4e0f1
UI access sidebar (#4658)
* add error template to access so that we can see the sidebar even if you don't have permissions

* identity template cleanup

* make the token expiry warning friendlier and style it
2018-05-30 12:26:54 -05:00
Jeff Mitchell
f64b4b2e5f Update kv plugin 2018-05-30 09:07:19 -04:00