9692 Commits

Author SHA1 Message Date
emily
376bd88479 Initial GCP auth backend documentation (#3167) 2017-08-15 22:03:04 -04:00
Jeff Mitchell
443df65ae5 Add PingID MFA docs (#3182) 2017-08-15 22:01:34 -04:00
Jeff Mitchell
15f3418a7d changelog++ 2017-08-15 21:48:33 -04:00
Jeff Mitchell
5cb6e9aabb changelog++ 2017-08-15 21:28:58 -04:00
Jeff Mitchell
e99a2cd877 Add the ability to use root credentials for AWS IAM authentication. (#3181)
Partial fix for #3179
2017-08-15 21:26:16 -04:00
Seth Vargo
bf50130335 Update help output (spaces instead of tabs) (#3178) 2017-08-15 21:21:30 -04:00
Brian Kassouf
1691a3756a Oracle plugin docs (#3131)
* Add oracle database docs

* Add oracle database docs

* Fix commas in json output

* Update oracle.html.md
2017-08-15 17:24:01 -07:00
Seth Vargo
d82f59cdba Use SSHPASS envvar instead of -p for sshpass (#3177)
From the sshpass manpage:

> The -p option should be considered the least secure of all of sshpass's options. All system users can see the password in the command line with a simple "ps" command. Sshpass makes a minimal attempt to hide the password, but such attempts are doomed to create race conditions without actually solving the problem. Users of sshpass are encouraged to use one of the other password passing techniques, which are all more secure.

This PR changes the sshpass behavior to execute a subprocess with the
SSHPASS envvar (which is generally regarded as more secure) than using
the -p option.
2017-08-15 19:43:39 -04:00
Jeff Mitchell
57b3801793 Add core sealing to test cluster shutdown 2017-08-15 17:06:38 -04:00
Jeff Mitchell
28defcab83 changelog++ 2017-08-15 16:45:02 -04:00
Jeff Mitchell
aa6a19cfbd Return 500 if existence check fails, not 400 (#3173)
Fixes #3162
2017-08-15 16:44:16 -04:00
Jeff Mitchell
85de18f231 changelog++ 2017-08-15 16:17:42 -04:00
Jeff Mitchell
e6b43f7278 Add permitted dns domains to pki (#3164) 2017-08-15 16:10:36 -04:00
Jeff Mitchell
542b5da8f2 Bump go-plugin version 2017-08-15 16:06:56 -04:00
Jeff Mitchell
44473719c1 changelog++ 2017-08-15 14:01:42 -04:00
Jeff Mitchell
2946d133af Make PKI root generation idempotent-ish and add delete endpoint. (#3165) 2017-08-15 14:00:40 -04:00
vishalnayak
77d70aff85 Added persona to logical auth 2017-08-15 13:55:58 -04:00
Calvin Leung Huang
e0c84d0f9f Direct plugin logs through vault's logger (#3142)
* Direct plugin logs through vault's logger

* Pass in a logger in testConfig
2017-08-15 10:16:48 -04:00
Andy Manoske
e064863284 Update index.html.md
Updated replication docs for DR
2017-08-14 19:02:02 -07:00
Johan Haals
109d727550 Update libraries (#3160)
* Remove vault-java which has better alternatives.
* Add ansible-vault, a zero dependency
[lookup-plugin](http://docs.ansible.com/ansible/latest/playbooks_lookups.html) for ansible
2017-08-14 20:28:11 -04:00
Jeff Mitchell
2cd1250c59 changelog++ 2017-08-14 20:16:36 -04:00
Jeff Mitchell
64cb31ad9c Switch policies in AppRole to TypeCommaStringSlice (#3163) 2017-08-14 20:15:51 -04:00
Jeff Mitchell
ff0bbbe2fc Fix hanadb link 2017-08-14 13:04:26 -04:00
Jeff Mitchell
7eb5463711 changelog++ 2017-08-14 12:44:44 -04:00
Jeff Mitchell
e2cad8aa15 Only use specified HTTP client for AWS creds if one is passed in. (#3161)
Probably fixes #3159
2017-08-14 12:43:11 -04:00
vishalnayak
db646c2c7a docs: Fix the default value for 'generate_signing_key' 2017-08-14 12:39:11 -04:00
Tony Cai
003bf92000 Add missing link to sidebar menu (#3153)
* Add missing link to sidebar menu

* Add missing link to sidebar menu
2017-08-14 12:33:47 -04:00
Jeff Mitchell
c1e34d7607 Add note about turning off core dumps into production hardening guide 2017-08-14 12:29:54 -04:00
Lucas Vasconcelos Santana
655cb4bd7d add scheme to the redirect_addr example 2017-08-14 10:59:44 -04:00
Lucas Vasconcelos Santana
8e67ccdef4 add scheme to the redirect_addr example 2017-08-14 10:59:44 -04:00
Seth Vargo
8581a7879c Break SSH types into their own pages (#3157)
@jefferai and I discussed this on Friday. With three fully-documented
SSH backends, the page is lengthy, ungreppable, and intimidating. This
commit separates the SSH backends into their own pages with as little
text changes as possible.
2017-08-14 10:49:41 -04:00
Seth Vargo
24c4c0c9c2 Rename database plugins for SEO (#3156)
When we "nest" like this, it's important to use a common suffix,
"Database Secret Backend" in this case, so that the SEO minions can
properly group search results for end users.
2017-08-14 10:46:39 -04:00
Tony Cai
4bbaaac6b2 Removed unused parameter from docs (#3152)
According to #3116, it seems like this parameter isn't used. I couldn't trigger any differences by playing around with transit signing function, and could not find anything in the source code that actually parses this param. Presumably, it is unused?
2017-08-11 20:57:06 -04:00
Jeff Mitchell
1c3ca9d4dd Update github comment 2017-08-11 17:03:18 -04:00
Jeff Mitchell
9943ded915 Fix broken url in replication performance docs 2017-08-11 16:03:05 -04:00
Brian Kassouf
1fd46cbcb1 Fix MySQL legacy username regression (#3141)
* Fix the mysql legacy username length

* Remove boolean parameter

* Add a MySQL 5.6 container to test the legacy MySQL plugin against

* Add database plugins to the make file

* Fix credsutil test
2017-08-10 18:28:18 -07:00
Seth Vargo
32c94e1a8c Remove references to VSI (#3143)
Andy approved
2017-08-10 20:47:59 -04:00
Issac
c1d69f8d79 Add TLS config to skeleton plugin (#3137) 2017-08-09 11:41:17 -07:00
vishalnayak
de82889d04 docs: Add API section for MFA docs 2017-08-09 13:26:29 -04:00
vishalnayak
cd14bf99ef docs: fix broken link 2017-08-09 13:17:56 -04:00
vishalnayak
22beec9ec0 docs: Added identity concepts 2017-08-09 13:08:05 -04:00
vishalnayak
6669837509 docs: Add X-Vault-MFA to the list of env vars 2017-08-09 11:31:30 -04:00
Chris Hoffman
7b55c457c7 API Docs updates (#3135) 2017-08-09 11:22:19 -04:00
Jeff Mitchell
847c59fb5b Fix cassandra doc link 2017-08-09 10:32:03 -04:00
Calvin Leung Huang
61031919db docs: Fix errors on plugin backends guide (#3134)
* docs: Fix path on sample command in plugin backend guide

* Fix grammar on intro

* Fix ref links in plugin guide
2017-08-09 10:28:13 -04:00
Jeff Mitchell
af63d87913
Cut version 0.8.0 v0.8.0 2017-08-09 05:12:12 -04:00
Jeff Mitchell
dbf1b9bd82 Prep for release 2017-08-09 05:05:21 -04:00
Vishal Nayak
d2b3f42936 docs: MFA usage details (#3133) 2017-08-08 23:48:31 -04:00
Jeff Mitchell
27b2764c28 Add an extra sentence to the github warning 2017-08-08 21:10:15 -04:00
Chris Hoffman
c3083ab7b3 splitting cache into transactional and non-transactional cache structs (#3132) 2017-08-08 20:47:14 -04:00