9692 Commits

Author SHA1 Message Date
Brian Kassouf
bc16792ffd Load leases into the expiration manager in parallel (#2370)
* Add a benchmark for exiration.Restore

* Add benchmarks for consul Restore functions

* Add a parallel version of expiration.Restore

* remove debug code

* Up the MaxIdleConnsPerHost

* Add tests for etcd

* Return errors and ensure go routines are exited

* Refactor inmem benchmark

* Add s3 bench and refactor a bit

* Few tweaks

* Fix race with waitgroup.Add()

* Fix waitgroup race condition

* Move wait above the info log

* Add helper/consts package to store consts that are needed in cyclic packages

* Remove not used benchmarks
2017-02-16 10:16:06 -08:00
Jeff Mitchell
64d63ba55a Add some repcluster handling to audit and add some tests (#2384)
* Add some repcluster handling to audit and add some tests

* Fix incorrect assumption about nil auth
2017-02-16 13:09:53 -05:00
Jeff Mitchell
513f8b918d Add WithOptions methods to audit/auth enabling (#2383) 2017-02-16 11:37:27 -05:00
Frank Gevaerts
6d49eb7b8f Update hsm.html.md (#2381) 2017-02-16 07:25:22 -05:00
Brian Kassouf
b23e4da01c Remove duplicate test case 2017-02-15 22:38:33 -08:00
Jeff Mitchell
28883acc16 Fix copypasta, thanks tests 2017-02-16 01:32:39 -05:00
Brian Kassouf
a372f5b884 s/has/has been/ 2017-02-15 22:19:35 -08:00
Brian Kassouf
3d5557b8f3 Remove unnecessary else condition 2017-02-15 22:18:20 -08:00
Brian Kassouf
9e4c25cace Merge branch 'acl-parameters-permission' of github.com:hashicorp/vault into acl-parameters-permission 2017-02-15 22:13:28 -08:00
Brian Kassouf
6b7d328e79 Fix the issue of returning on the first paramater check. Added tests for this case. 2017-02-15 22:13:18 -08:00
Jeff Mitchell
ead5a34ca7 changelog++ 2017-02-16 01:05:32 -05:00
Jeff Mitchell
5e5d9baabe Add Organization support to PKI backend. (#2380)
Fixes #2369
2017-02-16 01:04:29 -05:00
Jeff Mitchell
106521b128 changelog++ 2017-02-16 00:55:29 -05:00
Vishal Nayak
37297080f2 cidrutil: added test data points (#2378) 2017-02-16 00:51:02 -05:00
Jeff Mitchell
61e0534a7f Merge branch 'master-oss' into acl-parameters-permission 2017-02-16 00:46:40 -05:00
Jeff Mitchell
45590ee0af Merge pull request #2379 from hashicorp/issue-2362
Compare headers case-insensitively for auditing
2017-02-16 00:46:25 -05:00
Jeff Mitchell
f7036559d1 Fix audit test and make audited headers more robust in map checks 2017-02-16 00:44:20 -05:00
Jeff Mitchell
d6cf46759e Remove "permissions" from ACL 2017-02-15 21:12:26 -05:00
Jeff Mitchell
e2b7d43e01 Merge branch 'master-oss' into acl-parameters-permission 2017-02-15 20:37:58 -05:00
Jeff Mitchell
5d016d712d Compare headers case-insensitively for auditing
Fixes #2362
2017-02-15 20:35:35 -05:00
Phil Watts
14e815eede Edit to the language of the description of disable_mlock on the configuration documentation page. Previous wording could lead to confusion as to the recommended setting of the disable_mlock option. (#2377) 2017-02-15 11:09:27 -05:00
vishalnayak
791d2a3013 changelog++ 2017-02-15 10:59:15 -05:00
Vishal Nayak
c61dc69d19 aws-ec2 auth: Return the role period in seconds (#2374)
* aws-ec2 auth: Return the role period in seconds

* cast return values to int64 for comparison with expected values
2017-02-15 10:57:57 -05:00
Vishal Nayak
fbcb52aafa aws-ec2 auth: fix docs (#2375) 2017-02-15 06:29:27 -05:00
Jeff Mitchell
a4ffdf6581 changelog++ 2017-02-14 16:29:00 -05:00
Jeff Mitchell
ed51388c02 Fix Okta auth issue when a user has no policies and/or groups set. (#2371)
Fixes #2367
2017-02-14 16:28:16 -05:00
Jeff Mitchell
5f6c4a9696 changelog++ 2017-02-10 19:57:53 -05:00
Tommy Murphy
57aac16cd2 audit: support a configurable prefix string to write before each message (#2359)
A static token at the beginning of a log line can help systems parse
logs better. For example, rsyslog and syslog-ng will recognize the
'@cee: ' prefix and will parse the rest of the line as a valid json message.
This is useful in environments where there is a mix of structured and
unstructured logs.
2017-02-10 16:56:28 -08:00
Jeff Mitchell
a18f77e69c Update go-cleanhttp 2017-02-10 19:34:41 -05:00
P.Nikolajevs (pl)
1ecf8b1409 Update libraries.html.md (#2360) 2017-02-10 09:39:18 -08:00
Tommy Murphy
214cd65d55 docs: transit parameter is actually deletion_allowed (#2356) 2017-02-09 15:10:28 -05:00
Seth Vargo
abf98a107a Merge pull request #2358 from hashicorp/sethvargo-patch-1
Change cache to 4h
2017-02-09 14:39:18 -05:00
Seth Vargo
44a352217a Cache assets longer 2017-02-09 14:39:12 -05:00
Seth Vargo
53b373dd25 Change cache to 4h 2017-02-09 14:37:12 -05:00
vishalnayak
8b9f3a0b49 use net.JoinHostPort 2017-02-08 18:39:09 -05:00
Jeff Mitchell
c01d394a8d Add support for backup/multiple LDAP URLs. (#2350) 2017-02-08 14:59:24 -08:00
vishalnayak
ee8b7e21c5 changelog++ 2017-02-08 13:52:29 -05:00
Jeff Mitchell
b505b3b81c Correct port parsing. (#2354)
* Correct port parsing.

Fixes #2351

* use strings.Contains instead of strings.HasSuffix

* Make the error message point to the wrong input
2017-02-08 13:50:17 -05:00
Jack Harris
6f4da5ff07 Add correct output to unmount documentation (#2352)
Simply adding the actual output of: 'vault unmount generic/'
2017-02-08 10:40:56 -05:00
Jeff Mitchell
bc047982bf Merge branch 'master-oss' into acl-parameters-permission 2017-02-08 02:13:39 -05:00
Jeff Mitchell
25bcca2fad Bump deps 2017-02-08 02:13:15 -05:00
Jeff Mitchell
1d59d98fc7 Merge branch 'master-oss' into acl-parameters-permission 2017-02-08 01:59:52 -05:00
Jeff Mitchell
ed215640f4 changelog++ 2017-02-08 00:49:42 -05:00
Jeff Mitchell
50ddab2a60 Merge pull request #2154 from fcantournet/default-ldap-username
ldap auth via cli defaults username to env (#2137)
2017-02-07 21:47:59 -08:00
Jeff Mitchell
9b96276ec1 Use Getenv instead of LookupEnv
This prevents returning empty username if LOGNAME is set but empty and USER is set but not empty.
2017-02-07 21:47:06 -08:00
Jeff Mitchell
aba31b7092 Update error text 2017-02-07 21:44:23 -08:00
Jeff Mitchell
087871bade Push test functions to a var for overriding 2017-02-07 20:44:31 -05:00
Brian Kassouf
5b8939120d changelog++ 2017-02-07 16:42:47 -08:00
Jeff Mitchell
56b4fffb50 Add audited headers to sidebar 2017-02-07 17:02:14 -05:00
Jeff Mitchell
73000d1a01 Add Okta docs to sidebar 2017-02-07 16:57:28 -05:00