Matthew Irish
5190b87714
add min_encryption_version to the transit key response ( #2838 )
2017-06-08 13:07:18 -05:00
Jeff Mitchell
703874ed95
Add note about lowercasing usernames to userpass docs
2017-06-08 09:41:01 -04:00
jeremie0
4c2f9a6652
Fix link to mongodb database plugin docs ( #2834 )
2017-06-08 07:02:29 -04:00
Cameron Stokes
6186fabcaf
[docs] Add notes about deprecated database backends. ( #2835 )
2017-06-07 23:45:01 -07:00
Cameron Stokes
9fa289e9f6
[docs] Fix Mongodb link in sidebar.
2017-06-07 20:36:36 -07:00
Seth Vargo
e396235763
Update packer and makefile
2017-06-07 16:00:30 -04:00
Jeff Mitchell
0b20ae0b9b
Cut version 0.7.3
2017-06-07 15:39:25 -04:00
Jeff Mitchell
a74c5235c4
changelog++
2017-06-07 15:38:04 -04:00
Jeff Mitchell
4d8a8dfb7c
Bump versions
2017-06-07 15:23:51 -04:00
Jeff Mitchell
e5e6f0fc52
Automatically upgrade values to salted on access if salt exists in PathMap ( #2831 )
2017-06-07 15:22:08 -04:00
Brian Kassouf
7951a15d65
update database interface in the docs
2017-06-07 11:20:13 -07:00
Jeff Mitchell
d06b36ce8d
changelog++
2017-06-07 13:56:02 -04:00
Jeff Mitchell
42973f3d79
Clone policy permissions and then use existing values rather than policy values for modifications ( #2826 )
...
Should fix #2804
2017-06-07 13:49:51 -04:00
Jeff Mitchell
35f92f13f9
Add new transit features to documentation
2017-06-07 13:00:14 -04:00
Matthew Irish
d90f71fb19
changelog ++
2017-06-07 10:23:13 -05:00
Jeff Mitchell
4c89803c0e
changelog++
2017-06-07 10:28:21 -04:00
Joel Thompson
d858511fdf
Resolve AWS IAM unique IDs ( #2814 )
2017-06-07 10:27:11 -04:00
Jeff Mitchell
5be733dad5
changelog++
2017-06-07 10:18:35 -04:00
Jeff Mitchell
fc724a2f8f
Honor role period for IAM auth type in AWS backend ( #2828 )
...
Fixes #2825
2017-06-07 10:18:02 -04:00
Jeff Mitchell
e3910ccbaa
changelog++
2017-06-07 10:03:56 -04:00
Jeff Mitchell
2daf018361
Add listing to database connections. ( #2827 )
...
Fixes #2823
2017-06-07 10:03:17 -04:00
Dan Brown
25fd17a9c1
Docs typo fixes ( #2830 )
...
* Fix passing payload.json file to curl
* Correct API endpoint
2017-06-07 10:02:58 -04:00
Jeff Mitchell
16631f5670
changelog++
2017-06-06 22:36:12 -04:00
Joel Thompson
ee55e36af6
Check if there's a bound iam arn when renewing ( #2819 )
...
Previously, the renew method would ALWAYS check to ensure the
authenticated IAM principal ARN matched the bound ARN. However, there
is a valid use case in which no bound_iam_principal_arn is specified and
all bindings are done through inferencing. When a role is configured
like this, clients won't be able to renew their token because of the
check.
This now checks to ensure that the bound_iam_principal_arn is not empty
before requriing that it match the originally authenticated client.
Fixes #2781
2017-06-06 22:35:12 -04:00
Katie Bayes
cf6c3d7729
update middleman version from 24 to 26 ( #2824 )
2017-06-06 22:33:26 -04:00
Jeff Mitchell
b0888ea619
changelog++
2017-06-06 16:04:49 -04:00
Jeff Mitchell
bca213cf6d
Add ability to specify encryption key version in transit ( #2821 )
2017-06-06 16:02:54 -04:00
Jeff Mitchell
1fd2bdc086
changelog++
2017-06-06 09:50:38 -04:00
Brian Kassouf
abc900157b
Use the role name in the db username ( #2812 )
2017-06-06 09:49:49 -04:00
Jeff Mitchell
2631bde3ef
changelog++
2017-06-05 18:05:22 -04:00
Brian Rodgers
d4fb2624b4
Log auth info on permission denied due to ACL ( #2754 )
2017-06-05 18:04:31 -04:00
Jeff Mitchell
043b3f82c3
changelog++
2017-06-05 16:44:35 -04:00
Jeff Mitchell
28d7c6f90f
changelog++
2017-06-05 16:37:34 -04:00
Jeff Mitchell
6b0ca941a6
Add a no-store option to vault auth ( #2809 )
...
Fixes #2746
2017-06-05 16:36:28 -04:00
Jeff Mitchell
becf796c9a
Don't try to clean up upgrades if we're sealed
2017-06-05 16:00:56 -04:00
Jeff Mitchell
fe19bc3f07
Log heartbeat stopping
2017-06-05 15:57:04 -04:00
Jeff Mitchell
7b30613214
changelog++
2017-06-05 15:03:34 -04:00
Jeff Mitchell
a52fae256a
ed25519 support in transit ( #2778 )
2017-06-05 15:00:39 -04:00
Jeff Mitchell
09be3f6744
changelog++
2017-06-05 12:40:59 -04:00
Scott Sinclair
f6ba66ca06
Change split on instance profile name ( #2802 )
...
This now splits on the /, so we only get the last component of the instance profile name (ignoring paths)
2017-06-05 12:39:37 -04:00
Matthew Irish
4b1045eee1
changelog++
2017-06-05 11:35:03 -05:00
sam boyer
00383246a7
Minor typos & wordsmithing for clarity ( #2807 )
2017-06-05 09:32:09 -07:00
Jeff Mitchell
a2a0b44d79
Use the oauth2 context ability to specify a clean http client. ( #2808 )
...
Hopefully fixes #2793
2017-06-05 12:27:01 -04:00
Jeff Mitchell
186e7dd1f4
Add unsalted test to app-id
2017-06-05 11:37:16 -04:00
Jeff Mitchell
55e16eacfa
changelog++
2017-06-05 11:01:48 -04:00
Kiss György
57ba312941
Add Health() method to Sys client ( #2805 )
2017-06-05 11:00:45 -04:00
Jeff Mitchell
1c1937514b
changelog++
2017-06-05 10:55:42 -04:00
Jeff Mitchell
c655dee721
Add another nil guard to S3, follow on from #2785
2017-06-05 10:54:26 -04:00
Vishal Nayak
a337f9fcff
Avoid panic in s3 list operation ( #2785 )
2017-06-05 10:53:20 -04:00
Jeff Mitchell
83ecd0f9ad
Allow accessing Warnings directly in Response. ( #2806 )
...
A change in copystructure has caused some panics due to the custom copy
function. I'm more nervous about production panics than I am about
keeping some bad code wiping out some existing warnings, so remove the
custom copy function and just allow direct setting of Warnings.
2017-06-05 10:52:43 -04:00
