11583 Commits

Author SHA1 Message Date
ncabatoff
d1730bdc8d
changelog++ 2020-02-03 12:01:11 -05:00
ncabatoff
8cfe91ea9d
changelog++ 2020-02-03 11:56:07 -05:00
ncabatoff
7a1bb2ff04
Ensure that http_raw_body is always passed to the audit redaction system as a string
Before this it was passed as a []byte, which doesn't get HMAC'd.  The original non-HMACing behaviour can be obtained by adding "http_raw_body" to audit_non_hmac_response_keys. (#8130)
2020-02-03 11:53:02 -05:00
Sebastien Williams-Wynn
0f8f59ef81
Fix minor typo in doc string (#8277) 2020-02-02 20:12:59 +01:00
Becca Petrin
bef1fcfaa0
Update gen_openapi.sh (#8273)
* enable more auth backends in openapi gen

* cf and pcf are the same, with cf being preferred
2020-01-31 16:05:39 -08:00
Jeff Escalante
4cf6df7e22
update dependencies (#8271) 2020-01-31 14:27:39 -05:00
Jason O'Donnell
3c107faf43
docs: update vault k8s to 0.2.0 (#8269)
* doc: update vault-k8s to 0.2.0

* Add debugging note
2020-01-31 11:22:39 -05:00
ncabatoff
492ae16c31
Fix flaky test of api renewer by moving away from legacy api. (#8265) 2020-01-30 15:12:21 -05:00
Vitaly Velikodny
8d468563cb
Clean AlibabaCloud physical backend code (#8186) 2020-01-30 12:08:24 -08:00
Jim Kalafut
3ce37f9b5e
Update GH issue template to point to forum (#8226) 2020-01-30 11:39:46 -08:00
Daniel Spangenberg
2989c1df69
Fix default max_open_connections for db plugins (#8262) 2020-01-30 17:33:04 +01:00
Sarai
5a8f47bf40
Fix broken link (#8259)
- https://www.vaultproject.io/api/secret/pki/index.html#create-update-role
- https://www.vaultproject.io/api/secret/pki/index.html#createupdate-role
2020-01-30 08:12:24 -08:00
ncabatoff
20c514cc60
Removing timing-dependent aspects of test. (#8261) 2020-01-30 11:02:48 -05:00
Clint
f3d1cc21f2
Changelog++ 2020-01-30 09:11:54 -06:00
Alex Antonov
963e71c33e
Added flag to disable X-Vault-Token header proxy if client passes the token (#8101)
* Added flag to disable X-Vault-Token header proxy if client passes the token

* Reveresed the flag value to better match the name intent

* Introduced UseAutoAuthTokenRaw for Cache to support triplicate value of true/false/force

Co-authored-by: Clint <catsby@users.noreply.github.com>
2020-01-30 09:08:42 -06:00
Michel Vocks
8d123920b3
changelog++ 2020-01-30 11:13:32 +01:00
Becca Petrin
16af5d18dd changelog++ 2020-01-29 10:59:19 -08:00
Calvin Leung Huang
8f8ba51449
test: fix TestAgent_Template_Basic (#8257)
* test: fix TestAgent_Template_Basic

* test: fix TestAgent_Template_ExitCounter
2020-01-29 09:31:29 -08:00
Raoof Mohammed
ca28eef813
docs: fix api path for merge entity identity doc (#8258) 2020-01-29 08:56:36 -08:00
Michel Vocks
96ff398e50
Bump etcd client API dep (#8037) 2020-01-29 15:16:38 +01:00
Michel Vocks
b52049a749
Add Consul TLS options to access API endpoint (#8253) 2020-01-29 09:44:35 +01:00
Michel Vocks
a806b0b4ef
Docs: Add nomad TLS options (#8254) 2020-01-29 09:38:54 +01:00
Noelle Daley
8527ee4da2
Update CHANGELOG.md 2020-01-28 11:23:07 -06:00
Noelle Daley
5dbfd445d4
show kmip details in wizard (#8255) 2020-01-28 11:21:04 -06:00
Michel Vocks
0e232caf89
changelog++ 2020-01-28 11:06:27 +01:00
Michel Vocks
b879d61f02
Fix Vault Agent Template TLS config parameters (#8243) 2020-01-28 10:59:31 +01:00
Jim Kalafut
060775d9e9
Run goimports (#8251) 2020-01-27 21:11:00 -08:00
Chris Hoffman
443404ee01
fixing static pdf compliance letter (#8248) 2020-01-27 15:40:55 -05:00
Theron Voran
b5bcd61d19
Show bound_service_accounts in gce example (#8236)
Shows that the GCP auth option `bound_service_accounts` can be used
for gce-type roles as well as iam.
2020-01-27 11:48:21 -08:00
Angel Garbarino
ef84c75e50
Update CHANGELOG.md 2020-01-27 09:45:02 -07:00
Angel Garbarino
2a4125fcba
Allow default auth method to be either "other" or auth of the enabled listing-visibility unauth (#8218)
* remove default for authMethod as it's preventing the other auth methods from being selected as default when they are marked as List method when unauthenticated.

* fix test

* fix test

* fix typo

* fix missed query params

* fix missing backend.type, and adjust formatting per prettier requirements
2020-01-27 09:41:44 -07:00
Daniel Spangenberg
9de6ed66ee
Clarify the k8s helm run docs (#8235) 2020-01-27 14:54:59 +01:00
Michel Vocks
267665ecc0
Fix redoing redirect response raft snapshot cli (#8211)
* Fix redoing redirect response raft snapshot cli

* Removed unnecessary lines of code

* go mod vendor
2020-01-27 11:25:52 +01:00
Chris Hoffman
a2ea0b5502
Adding pricing module note for enterprise features (#8217)
* adding pricing module note for enterprise features

* fixing incorrectly committed go.mod
2020-01-24 19:18:22 -05:00
Becca Petrin
dbb4c60aba
Add Kerberos agent docs (#8220)
* add kerberos agent docs

* use relative doc link
2020-01-24 14:40:41 -08:00
Angel Garbarino
24c1c286f4
Update CHANGELOG.md 2020-01-24 13:58:08 -07:00
Angel Garbarino
aea2e9b7fa
Fix for missing License nav item in menu (#8230)
* remove condition to check if cluster is secondary.  It is unintentionally hiding the license menu item.  The cluser.dr.isSecondary condition is later checked on whether is should should the license line item farther down in the nested menu

* keep conditional, just wrap the final and in parentheses

* remove testing param
2020-01-24 13:54:36 -07:00
Nicole Forrester
d18e22ee82 package: mega nav version bump (#8215) 2020-01-24 14:52:52 -05:00
Nicole Forrester
192aacbd65 Website: Update diagram images (#8214) 2020-01-24 14:52:26 -05:00
Jeff Escalante
c502494186 patch docs sidenav to resolve a bug introduced yesterday (#8234) 2020-01-24 14:51:40 -05:00
Becca Petrin
d7d4084c86
Observer pattern for service registration interface (#8123)
* use observer pattern for service discovery

* update perf standby method

* fix test

* revert usersTags to being called serviceTags

* use previous consul code

* vault isnt a performance standby before starting

* log err

* changes from feedback

* add Run method to interface

* changes from feedback

* fix core test

* update example
2020-01-24 09:42:03 -08:00
Chris Hoffman
ae0892b3ce
updating download page version (#8233) 2020-01-24 09:08:24 -05:00
Michel Vocks
0f70708ed4
changelog++ 2020-01-24 09:37:00 +01:00
Michel Vocks
d402cc41d0
Mongodb driver switch to mongo-driver (#8140)
* Switch mongodb driver to mongo-driver

* Tidy mod

* Make writeConcern private

* Implement review feedback

* Add retry functionality

* Added backoff time

* go mod vendor

* Fix failing test

* goimport
2020-01-24 09:32:47 +01:00
Aaron Bedra
8cf49045d4 Fix example url for sys/wrapping/rewrap (#8222) 2020-01-23 21:09:53 -08:00
Mike Ruth
3e66f5aa9a Update API to include roleset TTL parameter (#8231)
Include documentation on including the TTL parameter for service account key rolesets. [Associated PR](https://github.com/hashicorp/vault-plugin-secrets-gcp/pull/54)
2020-01-23 17:54:28 -08:00
Michael Golowka OR 1=1); DROP TABLE users; --
ac33c32639
Update Kubernetes docs to include Kubernetes Auth method (#8046)
* Improve standalone with TLS example

- Documented creating a key & cert for serving Vault endpoints
- Removed unneeded configuration in custom values.yaml
- Updated examples to 1.3.0

* Add 127.0.0.1 to CSR

* Grammar & minor formatting

* Add additional DNS entry for CSR

* Split examples into individual pages

* Add Kubernetes Auth Method example

* Remove old examples file

* Fix rebase fail

* Remove global section of yaml files that aren't needed

* Fix minor typos

* Fix typos that didn't get carried over from previous PR

* Re-copy from previous examples file to resolve rebase issues

* update dependencies

Co-authored-by: Jeff Escalante <jescalan@users.noreply.github.com>
2020-01-23 13:14:01 -07:00
Jeff Escalante
8f30f51ae9 update dependencies (#8221) 2020-01-23 12:44:59 -07:00
Jeff Mitchell
46c416655e Bump sdk 2020-01-23 14:25:35 -05:00
Jeff Mitchell
777c450625 Fix Flush interface in gatedwriter 2020-01-23 14:24:13 -05:00