9692 Commits

Author SHA1 Message Date
Jeff Mitchell
6fc2ff0927 Give more time for the self revocation test to run 2018-05-25 15:24:06 -04:00
Joshua Ogle
90a9a9a0ba Update upgrade link 2018-05-25 13:17:02 -06:00
Joshua Ogle
e8d3c00090
Merge branch 'master' into jo-upgrade-copy 2018-05-25 12:59:50 -06:00
Jeff Mitchell
a5563e4aec
Redo API client locking (#4551)
* Redo API client locking

This assigns local values when in critical paths, allowing a single API
client to much more quickly and safely pipeline requests.

Additionally, in order to take that paradigm all the way it changes how
timeouts are set. It now uses a context value set on the request instead
of configuring the timeout in the http client per request, which was
also potentially quite racy.

Trivially tested with
VAULT_CLIENT_TIMEOUT=2 vault write pki/root/generate/internal key_type=rsa key_bits=8192
2018-05-25 14:38:06 -04:00
Becca Petrin
0b555f3058
Add Active Directory secrets plugin (#4635) 2018-05-25 11:37:41 -07:00
Becca Petrin
71fb24e5ac add userpass note on bound cidrs (#4610) 2018-05-25 14:35:09 -04:00
Jeff Mitchell
4d1a6b650a
Add key information to list endpoints in identity. (#4634)
* Add key information to list endpoints in identity.

Also fixes some bugs from before where we were persisting data that we
should not have been (mount type/path).

* Add cached lookups of real time mount info
2018-05-25 14:34:24 -04:00
Joshua Ogle
da127b0a23 Make popup menus consistent 2018-05-25 12:05:20 -06:00
Joshua Ogle
5240c1df59 Update styles for popover menus 2018-05-25 12:05:20 -06:00
Joshua Ogle
eca0ca264d Update styles for tabs 2018-05-25 12:05:20 -06:00
Joshua Ogle
bf04c73593 Update styles for list row hover 2018-05-25 12:05:20 -06:00
Joshua Ogle
0cb9c5e515 Update styles for box shadows 2018-05-25 12:05:20 -06:00
Martin
4ab9eef57a Typo in Visibility + Add accepted values in Description (#4638) 2018-05-25 13:39:35 -04:00
Joshua Ogle
fcdf8a5ac1 UI: Update copy for upgrade modal 2018-05-25 11:36:08 -06:00
Chris Hoffman
61380216b2
changelog++ 2018-05-25 12:53:26 -04:00
Chris Hoffman
a5ea470f22
changelog++ 2018-05-25 12:52:49 -04:00
Jeff Mitchell
2d949f3942 Fix mistaken extra Period value 2018-05-25 11:54:36 -04:00
Jeff Mitchell
c4f8a3a5c3 Changelogify and fix some minor website bits 2018-05-25 10:39:23 -04:00
Nicholas Jackson
61e0eda70c Breakout parameters for x.509 certificate login (#4463) 2018-05-25 10:34:46 -04:00
Becca Petrin
69b1cae9e2
fix tests (#4636) 2018-05-24 13:57:25 -07:00
Yoko
7522d56669
Vault Interactive Tutorial updates (#4623)
* Added more tutorial steps

* Updated the step texts
2018-05-24 11:39:02 -07:00
Brian Kassouf
5d3f247620
changelog++ 2018-05-24 10:03:48 -07:00
nelson
f87d452d40 Update kv-v2.html.md (#4614)
correct the payload format for "Configure the KV Engine" and "Update Metadata"
2018-05-24 12:44:44 -04:00
Matthew Irish
3bc90acdf5
UI - identity details (#4502)
* add popups
* add ability to disable entity and banner when entity is disabled
* re-add alias-popup template
* add accpetance tests for creating entities
* add more entity creation acceptance tests
* add delete to edit-form
* add more identity tests and associated selectors
* add onSuccess hook and use UnloadModel route mixins
* add ability to toggle entity disabling from the popover
* fix store list cache because unloadAll isn't synchronous
* fill out tests for identity items and aliases
* add ability to enable entity from the detail page
* toArray on the peekAll
* fix other tests/behavior that relied on a RecordArray
* adjust layout for disabled entity and label for disabling an entity on the edit form
* add item-details integration tests
* move disable field on the entity form
* use ghost buttons for delete in identity and policy edit forms
* adding computed macros for lazy capability fetching and using them in the identity models
2018-05-23 22:10:21 -05:00
Brian Kassouf
70434e28ed
Add debug comment when singleton reload is skipped (#4625) 2018-05-23 17:52:11 -07:00
Brian Kassouf
dfdfa3f632
ui/mounts: Add a better error message when permission is denied (#4624)
* ui/mounts: Add a better error message when permission is denied

* Update logical_system.go
2018-05-23 17:47:54 -07:00
Jeff Mitchell
9e92a1fc10 Prevent warnings from showing in individual commands when format is not table, in addition to the existing hiding of higher-level deprecation warnings 2018-05-23 17:13:39 -04:00
Jeff Mitchell
b104ad5c90
Don't use environment as a mechanism for floating format around. (#4622)
This turns out to not work very well for the demo server. Also,
it's kinda hacky.
2018-05-23 16:45:17 -04:00
Jeff Mitchell
586c03e552
Fix panic on deprecated audit-disable and some cleanup (#4619) 2018-05-23 12:34:48 -04:00
Matthew Irish
c722bc0e39
UI - make engine list more consistent with the auth method list (#4598)
* remove expanding behavior from engines list and add a configuration route

* use page header component, secret tab component for the template on the secret engine configuration route

* move abstraction to secret-list-header and remove secret-tabs

* add attrs to secret engine model and adjust mount controller code to support that

* fix top level nav so that we can use the back button properly

* fix tests
2018-05-23 11:25:52 -05:00
Jeff Mitchell
0545944fc5 Interactive server now uses kvv2 so update text 2018-05-23 09:59:52 -04:00
Jeff Mitchell
7dd05ab2b8 changelog++ 2018-05-23 09:57:27 -04:00
Jeff Mitchell
3dcd5a2a17
Add missing flags to KV commands and simplify boilerplate (#4617) 2018-05-23 09:56:47 -04:00
Chris Hoffman
c42adad873
remove incorrect parameter 2018-05-23 08:58:27 -04:00
Matthew Irish
1a9e7287df
Update CHANGELOG.md 2018-05-22 16:52:28 -05:00
Matthew Irish
42b329eb25
fix issue where unwrapping a response with an auth block wouldn't work (#4611) 2018-05-22 16:49:29 -05:00
Jeff Mitchell
1fb28cf398 Add a switch for the demo server to use version 2 kv mount by default 2018-05-22 17:31:36 -04:00
Chris Hoffman
a43143889e
changelog++ 2018-05-22 16:52:18 -04:00
Jeff Mitchell
8011cfe703 Update to TrustedCAFile for etcd as CAFile is deprecated and removed in latest libs 2018-05-22 15:46:39 -04:00
Jeff Mitchell
674c107ad4 Specify go-oidc v2 for update-deps 2018-05-22 15:42:54 -04:00
Jeff Mitchell
804b5e9bd2 Minor website doc updates 2018-05-22 15:12:12 -04:00
Becca Petrin
8b4f412299
Fix possible nil pointer on mapping method (#4609) 2018-05-22 12:10:36 -07:00
Yoko
d67e3b3200
Seal Wrap / FIPS 140-2 Compliance guide (#4558)
* WIP - Seal Wrap guide

* WIP: Seal Wrap guide

* Added a brief description about the Seal Wrap guide

* Incorporated feedbacks

* Updated FIPS language

Technically everything looks great. I've updated some of the language here as "compliance" could be interpreted to mean that golang's crypto and xcrypto libraries have been certified compliant with FIPS. Unfortunately they have not, and Leidos' cert is only about how Vault can operate in tandem with FIPS-certified modules.

It's a very specific update, but it's an important one for some VE customers.

Looks great - thanks!

* Removed 'Compliance' from title

* typo fix
2018-05-22 11:23:11 -07:00
Jeff Mitchell
c0275a3c7d Add instructions for both kvv1 and kvv2 to getting started policies info 2018-05-22 14:07:12 -04:00
Yoko
500cb5737c
Mount Filters guide (#4536)
* WIP: Mount filter guide

* WIP

* Mount filter guide for CLI, API, and UI

* updated the next step

* Updated the verification steps

* Added a note about the unseal key on secondaries

* Added more details

* Added a reference to mount filter guide

* Added a note about generating a new root token

* Added a note about local secret engine
2018-05-22 08:57:36 -07:00
Jeff Mitchell
4c6fb7b19c changelog++ 2018-05-22 10:39:24 -04:00
Chris Hoffman
25df1c28e4
updating link 2018-05-22 10:00:20 -04:00
Dan Brown
4fc853a04a Fix typo (#4607) 2018-05-22 08:30:13 -04:00
Jeff Mitchell
9003cf1692 Failure to provide correct key shares isn't an internal error, it's a
user error
2018-05-21 21:06:38 -04:00
Jeff Mitchell
c05421ed3a Don't allow providing original key shares once we've moved on to verification 2018-05-21 21:02:45 -04:00