Jeff Mitchell
e5ccac6a39
Add approle agent method removing secret ID file by default. ( #5648 )
...
Also, massively update tests.
2018-10-30 14:09:04 -04:00
Aleksey Zhukov
e9d855217b
WIP Agent AppRole auto-auth ( #5621 )
2018-10-30 12:17:19 -04:00
Chris Hoffman
caf81bc28c
Add -dev-auto-seal option ( #5629 )
...
* adding a -dev-auto-seal option
* adding logger to TestSeal
2018-10-29 09:30:24 -04:00
Jeff Mitchell
45f80ee028
Remove agent reauthentication on new credentials. ( #5615 )
...
Functionality is left in for use in testing (where it is indeed quite
useful).
Fixes #5522
2018-10-27 10:45:55 -07:00
Jim Kalafut
732a3fa60b
Fix command panic by returning empty (not nil) map ( #5603 )
...
Fixes #5600
2018-10-24 13:08:40 -07:00
Jeff Mitchell
6b0782989a
Fix build
2018-10-23 15:09:35 -04:00
Jeff Mitchell
41deb88d68
Add disable-indexing
2018-10-23 15:03:17 -04:00
Jeff Mitchell
c87251b399
Fix build
2018-10-23 04:12:23 -04:00
Jeff Mitchell
ee49d7aa18
Merge branch 'master-oss' into 1.0-beta-oss
2018-10-23 04:02:28 -04:00
Jeff Mitchell
05f92994ed
Change deprecation warning to 1.1
2018-10-23 02:44:57 -04:00
Chris Hoffman
107ba2ab9a
adding gcpkms secrets engine ( #784 )
2018-10-22 23:39:25 -07:00
Jeff Mitchell
2f5b464bc9
Seal migration (OSS) ( #781 )
2018-10-22 23:34:02 -07:00
Vishal Nayak
ba028e0884
Fix flag name for kv help text ( #5580 )
2018-10-22 15:22:43 -04:00
Calvin Leung Huang
3d1f0d76c0
[Review Only] Autoseal OSS port ( #757 )
...
* Port awskms autoseal
* Rename files
* WIP autoseal
* Fix protobuf conflict
* Expose some structs to properly allow encrypting stored keys
* Update awskms with the latest changes
* Add KeyGuard implementation to abstract encryption/decryption of keys
* Fully decouple seal.Access implementations from sealwrap structs
* Add extra line to proto files, comment update
* Update seal_access_entry.go
* govendor sync
* Add endpoint info to configureAWSKMSSeal
* Update comment
* Refactor structs
* Update make proto
* Remove remove KeyGuard, move encrypt/decrypt to autoSeal
* Add rest of seals, update VerifyRecoveryKeys, add deps
* Fix some merge conflicts via govendor updates
* Rename SealWrapEntry to EncryptedBlobInfo
* Remove barrier type upgrade check in oss
* Add key to EncryptedBlobInfo proto
* Update barrierTypeUpgradeCheck signature
2018-10-19 14:43:57 -07:00
Jeff Mitchell
231c325770
Merge branch 'master-oss' into 1.0-beta-oss
2018-10-16 10:08:03 -04:00
Jeff Mitchell
bc33dbd13d
Add LastWAL in leader/health output ( #5523 )
2018-10-16 09:38:44 -04:00
Jeff Mitchell
a58d313d2b
Batch tokens ( #755 )
2018-10-15 12:56:24 -04:00
Jeff Mitchell
d7655a9db0
Buffer authhandler output channel to prevent hang on shutdown ( #5507 )
...
Fixes #5026
2018-10-15 11:02:53 -04:00
Jim Kalafut
46ccb88184
Don't copy HA lock file during migration ( #5503 )
2018-10-12 09:29:15 -07:00
Jeff Mitchell
a00233648f
Warn when users don't configure api_addr ( #5496 )
...
Fixes some sources of user strife
2018-10-10 14:52:00 -04:00
Calvin Leung Huang
0b2350bc15
Logger cleanup ( #5480 )
2018-10-09 09:43:17 -07:00
Jim Kalafut
c4dc44a920
Fix 'vault auth' panic ( #5473 )
...
Running 'vault auth' with no parameters was panicking:
panic: assignment to entry in nil map
github.com/hashicorp/vault/command/login.go:255 +0xdee
Now it will show help.
2018-10-05 16:05:26 -07:00
JohnVonNeumann
c628d8b37c
Update operator_init.go ( #5441 )
...
Minor grammar fix.
2018-10-01 17:19:13 -07:00
Jim Kalafut
3d1f6e6f7c
Retry failing migration check instead of exiting ( #5427 )
2018-10-01 14:35:35 -07:00
Jeff Mitchell
382f28ee24
Send initialized information via sys/seal-status ( #5424 )
2018-09-27 14:03:37 -07:00
Jim Kalafut
370477f761
Fix server command test ( #5407 )
...
The addition of CheckMigration to the server startup process means
that physical backends in this test need to be able to respond to Get() without error.
2018-09-26 14:52:11 -07:00
Jim Kalafut
4753f4a440
Fix wording in log message ( #5399 )
2018-09-25 16:52:03 -07:00
Jim Kalafut
3ea652b0b4
Add physical backend migrator command ( #5143 )
2018-09-25 16:18:22 -07:00
Seth Vargo
03e24be542
Also format TTLs in non-secret responses ( #5367 )
2018-09-21 09:54:18 -04:00
Becca Petrin
d76e67afc7
add alicloud secrets engine ( #5352 )
2018-09-19 08:42:28 -07:00
Jeff Mitchell
e8b7ec2e11
Fix default_max_request_duration HCL name and update docs ( #5321 )
...
* Fix default_max_request_duration HCL name and update docs
* Update tcp.html.md
2018-09-18 14:30:21 -07:00
Jeff Mitchell
b7d6d55ac1
The big one ( #5346 )
2018-09-17 23:03:00 -04:00
Jim Kalafut
d1465bdbf5
Improve CLI error message ( #5327 )
2018-09-13 08:23:36 -07:00
Becca Petrin
25cb22fe0a
Poll for new creds in the AWS auth agent ( #5300 )
2018-09-12 13:30:57 -07:00
Becca Petrin
e1687ed78d
update to match aws ( #5315 )
2018-09-11 11:10:50 -07:00
Jeff Mitchell
d47e54ac72
Fix authhandler-based wrapping in agent ( #5316 )
2018-09-11 13:10:11 -04:00
Jeff Mitchell
d3edc47096
Allow most parts of Vault's logging to have its level changed on-the-fly ( #5280 )
...
* Allow most parts of Vault's logging to have its level changed on-the-fly
* Use a const for not set
2018-09-05 15:52:54 -04:00
Becca Petrin
d69c674c8e
Add AliCloud auth to the Vault Agent ( #5179 )
2018-09-05 11:56:30 -04:00
Jim Kalafut
5d86afe9a5
Fix server test that fails build under 1.11 ( #5264 )
...
command/server_test.go:147:2: finished declared but not used
vet: typecheck failures
2018-09-04 11:35:28 -06:00
Brian Kassouf
d3017e259f
Add performance standby status to status output ( #5192 )
...
* Add performance standby status to status output
* Update ha.go
2018-08-27 10:01:07 -07:00
Jeff Mitchell
5406f1952a
Sync some changes over
2018-08-27 12:03:43 -04:00
Jeff Mitchell
f1f6fb002d
Sync over
2018-08-27 12:02:57 -04:00
Jeff Mitchell
9e3670a614
Change deprecation warnings from 0.11 or later to 0.12. ( #5176 )
...
Also remove a deprecated parameter that we warned would be removed since
0.8.
2018-08-24 12:16:37 -04:00
Jeff Mitchell
935815d3da
Sync over some stuff
2018-08-24 12:09:03 -04:00
Becca Petrin
473bb4173a
Auth handler shutdown logic ( #5170 )
2018-08-24 09:17:14 -04:00
Jeff Mitchell
4d879d20fe
Don't resetnamed
2018-08-23 15:04:18 -04:00
Calvin Leung Huang
ac10e2078e
command/namespace: Move trailing slash check to the end ( #5163 )
2018-08-22 15:49:24 -07:00
Jeff Mitchell
dc9d3f3012
Sync some ns stuff to api/command
2018-08-22 14:37:40 -04:00
Jeff Mitchell
1820110443
Pass in an ErrorLog to http.Server ( #5135 )
...
Fixes #5108
2018-08-21 11:23:18 -04:00
Jim Kalafut
1b8b425e82
Initial import of Azure Secrets ( #5120 )
...
* Initial import of Azure Secrets
* Update vendor folder
2018-08-16 12:18:06 -07:00