Seth Vargo
7eac499b4b
Switch to new container-based build ( #2436 )
2017-03-03 11:26:26 -05:00
Vishal Nayak
8491db3ce6
ssh: Added DeleteOperation to config/ca ( #2434 )
...
* ssh: Added DeleteOperation to config/ca
* Address review feedback
2017-03-03 10:19:45 -05:00
vishalnayak
954c587ad7
changelog++
2017-03-03 09:36:31 -05:00
Vishal Nayak
f4d74fe4cc
AppRole: Support restricted use tokens ( #2435 )
...
* approle: added token_num_uses to the role
* approle: added RUD tests for token_num_uses on role
* approle: doc: added token_num_uses
2017-03-03 09:31:20 -05:00
Jeff Mitchell
bbe09f20d8
changelog++
2017-03-02 17:37:48 -05:00
Jeff Mitchell
ebb798ec1b
Cut version 0.7.0-beta1
2017-03-02 17:18:32 -05:00
Jeff Mitchell
bc4e11c2fc
Bump version for beta
2017-03-02 17:17:43 -05:00
Jason Costello
af1d56609b
Website update typography ( #2429 )
2017-03-02 17:10:33 -05:00
Jeff Mitchell
4b7a749c20
changelog++
2017-03-02 17:08:22 -05:00
Brian Kassouf
65cae93323
changelog++
2017-03-02 14:05:04 -08:00
Brian Kassouf
4eb771cb9b
Changelog++
2017-03-02 13:59:20 -08:00
Jeff Mitchell
e8e1905c96
Some minor ssh docs updating
2017-03-02 16:47:21 -05:00
Jeff Mitchell
5fe459f91a
Update SSH CA logic/tests
2017-03-02 16:39:22 -05:00
Vishal Nayak
93b74ebe71
Refactor the generate_signing_key processing ( #2430 )
2017-03-02 16:22:06 -05:00
Jeff Mitchell
1c821e448d
Update error text to make it more obvious what the issue is when valid principals aren't found
2017-03-02 15:56:08 -05:00
Jeff Mitchell
db29bde264
Fix a bunch of errors from returning 5xx, and parse more duration types
2017-03-02 15:38:34 -05:00
Jeff Mitchell
f0963180a2
changelog++
2017-03-02 15:00:01 -05:00
Jeff Mitchell
510d443955
Understand local when persisting mount tables, to avoid invalidations when not necessary ( #2427 )
2017-03-02 14:37:59 -05:00
Will May
ffb5ee7fda
Changes from code review
2017-03-02 14:36:13 -05:00
Will May
f9d853f7f0
Allow internal generation of the signing SSH key pair
2017-03-02 14:36:13 -05:00
Jeff Mitchell
eb88b89816
Fix double-lock
2017-03-02 10:54:31 -05:00
Jeff Mitchell
ddda27bf32
Use own mutex for updating cluster parameters and fix leader UUID bug
2017-03-02 10:50:54 -05:00
Jeff Mitchell
72989d190b
Add some trace level information about new cluster status
2017-03-02 10:21:35 -05:00
Jeff Mitchell
174de7d80f
Large update to request forwarding handling. ( #2426 )
2017-03-02 10:03:49 -05:00
Jeff Mitchell
a757161b53
Bump http2 dep to fix Go 1.8 breakage
2017-03-02 00:46:17 -05:00
Jeff Mitchell
24768a06a9
Some more forwarding client cleanup
2017-03-01 20:59:20 -05:00
Jeff Mitchell
83845a30fb
Clean up request forwarding logic
2017-03-01 18:17:06 -05:00
Brian Kassouf
543049827e
Update TestSeal to ignore setting the config to nil
2017-03-01 14:10:06 -08:00
vishalnayak
8f2b1829a1
changelog++
2017-03-01 16:00:20 -05:00
Vishal Nayak
d30a833db7
Rework ssh ca ( #2419 )
...
* docs: input format for default_critical_options and default_extensions
* s/sshca/ssh
* Added default_critical_options and default_extensions to the read endpoint of role
* Change default time return value to 0
2017-03-01 15:50:23 -05:00
Will May
7d9cb5bffe
Changes from code review
...
Major changes are:
* Remove duplicate code
* Check the public key used to configure the backend is a valid one
2017-03-01 15:19:18 -05:00
Will May
59397250da
Changes from code review
...
Major changes are:
* Change `allow_{user,host}_certificates` to default to false
* Add separate `allowed_domains` role property
2017-03-01 15:19:18 -05:00
Will May
1d59b965cb
Add ability to create SSH certificates
2017-03-01 15:19:18 -05:00
Jeff Mitchell
cdd02606c0
Rejig signature of last remote wal
2017-03-01 12:42:10 -05:00
Jeff Mitchell
b62770cb2e
Add last remote WAL bits
2017-03-01 12:40:36 -05:00
Seth Vargo
dcf2a56307
Re-enable soft purging, stale-if-error
2017-03-01 12:38:40 -05:00
Jeff Mitchell
2ac644d983
Add ability to set max retries to API
2017-03-01 12:24:08 -05:00
Jeff Mitchell
d93dcd8a10
Have duration.ParseDurationSecond handle json.Number
2017-03-01 08:32:05 -05:00
Jeff Mitchell
101f61f5ac
Add seal cache purging back into postUnseal
2017-02-28 18:36:28 -05:00
Jeff Mitchell
51f2040def
Rejig core standby logic to check validity of barrier during active transition
2017-02-28 18:17:30 -05:00
Seth Vargo
6fdf8336cd
Cache for a longer time on Fastly ( #2417 )
2017-02-28 16:54:51 -05:00
Jordan Abderrachid
aae23b1ea1
api: add EnvVaultToken constant. ( #2413 )
2017-02-27 18:36:21 -05:00
Jeff Mitchell
a93f12ba4e
changelog++
2017-02-27 15:41:40 -05:00
Jeff Mitchell
27f917d656
Update policies doc with allowed/denied params and min/max wrapping ttl info
2017-02-27 15:17:19 -05:00
Jeff Mitchell
95513e0f1e
Add max/min wrapping TTL ACL statements ( #2411 )
2017-02-27 14:42:00 -05:00
Jeff Mitchell
1a67f86fa0
changelog++
2017-02-27 14:31:54 -05:00
Marshall Brekka
2ee7e26dae
Add a TTL to the dynamodb lock implementation. ( #2141 )
2017-02-27 14:30:34 -05:00
Jeff Mitchell
7c4e5a775c
Fix breakage for HTTP2 support due to changes in wrapping introduced in 1.8 ( #2412 )
2017-02-27 12:49:35 -05:00
Jeff Mitchell
adcc95d61a
Make rollback attempts trace level instead of debug level
2017-02-27 09:41:56 -05:00
Sean Chittenden
f075d7a3cd
Change the default DisplayName for a Circonus check to be Vault instead of the InstanceID.
...
Trivial defaults change, committing direct to `master`.
2017-02-26 15:18:46 -08:00
