8674 Commits

Author SHA1 Message Date
Matthew Irish
d6ab7bcd54
UI namespace additions (#5150)
* add switch link on namespace link page if user has access to the namespace
* refresh list when you delete, only show manage if you can list
* fix bug where disconnected namespaces wouldn't show the picker properly
* namespaces list should end in a slash
* end full namespace paths with a /
* shorten pop up menu link
2018-08-22 11:13:28 -05:00
Chris Hoffman
62eae43c07
fixing feature name 2018-08-22 11:41:28 -04:00
Chris Hoffman
7e4ba6f7d6
fixing feature name 2018-08-22 11:40:48 -04:00
Hugo Wood
08782dc7a1 JWT/OIDC documentation fixes (#5157)
* Fix argument name in JWT/OIDC login CLI example

* Fix groups_claim documented as required when creating roles for JWT/OIDC
2018-08-22 10:44:08 -04:00
Jim Kalafut
63abfec999
Update Azure Secrets plugin (#5154) 2018-08-21 21:05:05 -07:00
Stenio Ferreira
fa8f84b3b6 Fixed a typo in the Namespaces guide (#5151) 2018-08-21 13:33:40 -07:00
Vishal Nayak
4c81e28e09
Checks for assigning root policy (#5152)
* Fail if other policies present along with root

* disallow entity/group to contain root policy
2018-08-21 16:12:23 -04:00
Jeff Mitchell
611e53f052 changelog++ 2018-08-21 15:11:49 -04:00
Jeff Mitchell
338a46a3a8 Pull in jwt auth update 2018-08-21 15:11:18 -04:00
Jeff Mitchell
1528b209a0 changelog++ 2018-08-21 11:54:47 -04:00
Jeff Mitchell
fe309723c9
Add the ability to specify token CIDR restrictions on secret IDs. (#5136)
Fixes #5034
2018-08-21 11:54:04 -04:00
Jeff Mitchell
93ddc7503a changelog++ 2018-08-21 11:24:09 -04:00
Jeff Mitchell
1820110443
Pass in an ErrorLog to http.Server (#5135)
Fixes #5108
2018-08-21 11:23:18 -04:00
Jeff Mitchell
224587dd76 changelog++ 2018-08-21 11:22:48 -04:00
Jeff Mitchell
b54b2648f1
Two PKI improvements: (#5134)
* Disallow adding CA's serial to revocation list
* Allow disabling revocation list generation. This returns an empty (but
signed) list, but does not affect tracking of revocations so turning it
back on will populate the list properly.
2018-08-21 11:20:57 -04:00
Gerardo Rodriguez
0a2dd2a324 Edit, missing "to" (#5147) 2018-08-21 11:09:41 -04:00
Jeff Mitchell
675bf7a08e Pull in go-ldap update that fixes comparison with AD 2018-08-20 18:16:47 -04:00
Joel Thompson
f88c1b37b7 Remove reference to bower in UI README (#5137)
@meirish removed Bower in #4526 but the references to it in the README
were still intact.
2018-08-19 10:21:22 -04:00
Jeff Mitchell
4eb09bd831 Use strings.Contains for error possibly coming from storage
They may not well errwrap

Fixes #5046
2018-08-17 16:06:47 -04:00
Jim Kalafut
f7f98e222a
Request less random data in truncate mode (#5118) 2018-08-17 10:17:40 -07:00
Chris Hoffman
9369c8e1c4
adding namespace docs (#5133) 2018-08-17 12:17:11 -04:00
Chris Hoffman
d12b17cbf1
Add additional clarification 2018-08-17 08:55:49 -04:00
Raja Nadar
c7adfdedd0 vaultsharp - multi platform capabilities (#5127) 2018-08-17 08:47:16 -04:00
Oleksiy Kovyrin
dd1ceaca7a A simple copy-paste fix (#5130)
The test for MySQL HA backend seems to have been based on the Zookeeper one and the error message in it did not get updated to be MySQL-specific.
2018-08-17 08:46:56 -04:00
Yoko
f0e5d82527 [Guide] Multi-Tenant Pattern with ACL Namespaces (0.11) (#5103)
* WIP - ACL Namespace

* WIP - ACL Namepaces

* WIP

* WIP

* WIP

* WIP

* WIP

* Added UI screenshots

* Added summary at the end

* Added the Web UI steps in Step 5

* Update multi-tenant.html.md

Updated text to ensure that we use the final "ship" name of namespaces (namespaces vs. ACL Namespaces) and introduced some industry-specific terminology (highlighting this is about Secure Multi-Tenancy)
2018-08-16 16:51:53 -07:00
Andy Manoske
0a3a1d2810
Merge pull request #5112 from hashicorp/namespaces-docs
Merge for Beta Launch
2018-08-16 15:36:43 -07:00
Chris Hoffman
2542f805a0
doc updates 2018-08-16 17:59:39 -04:00
Brian Kassouf
81309cef02
Update upgrade-to-0.11.0.html.md 2018-08-16 14:29:18 -07:00
Brian Kassouf
4b84a95ea5
Add upgrade notes (#5125) 2018-08-16 14:22:27 -07:00
Brian Kassouf
624cf517f4
changelog++ 2018-08-16 14:22:14 -07:00
Andy Manoske
6c6f511fa1
Update docs.erb 2018-08-16 13:44:13 -07:00
Andy Manoske
f59d8a8814
Update index.html.md
Updated to include Yoko's guide URL
2018-08-16 13:38:24 -07:00
Jeff Mitchell
3cc78f54c6
Cut version 0.11.0-beta1 v0.11.0-beta1 2018-08-16 16:29:08 -04:00
Jeff Mitchell
d94e0dd2a1 Bump version 2018-08-16 16:24:10 -04:00
Jeff Mitchell
e0714d331d Remove non existent vendored files 2018-08-16 16:23:28 -04:00
Jeff Mitchell
d52bddebd9 Sync plugins 2018-08-16 16:21:38 -04:00
Chris Hoffman
add60e6dc7
changelog++ 2018-08-16 16:15:07 -04:00
Chris Hoffman
8655d16708
changelog++ 2018-08-16 16:06:28 -04:00
Becca Petrin
5455532dfe
correct alicloud auth changelog note 2018-08-16 13:00:03 -07:00
Becca Petrin
333304d47c
add alicloud auth to changelog 2018-08-16 12:59:27 -07:00
Chris Hoffman
9cadc6e9ab
Update CHANGELOG.md 2018-08-16 15:55:44 -04:00
Jim Kalafut
efefc04ae0
changelog++ 2018-08-16 12:53:41 -07:00
Clint
ca1e2a766e [WIP] Support custom max Nomad token name length [supersedes https://github.com/hashicorp/vault/pull/4361] (#5117)
* Nomad: updating max token length to 256

* Initial support for supporting custom max token name length for Nomad

* simplify/correct tests

* document nomad max_token_name_length

* removed support for max token length env var. Rename field for clarity

* cleanups after removing env var support

* move RandomWithPrefix to testhelpers

* fix spelling

* Remove default 256 value. Use zero as a sentinel value and ignore it

* update docs
2018-08-16 15:48:23 -04:00
Jim Kalafut
1b8b425e82 Initial import of Azure Secrets (#5120)
* Initial import of Azure Secrets

* Update vendor folder
2018-08-16 12:18:06 -07:00
Becca Petrin
d3f8eabb9b Add alicloud auth (#5123)
* add alicloud auth commands

* add dependencies
2018-08-16 12:17:49 -07:00
Jim Kalafut
bc2f70e19b
Initial Azure Secrets docs (#5121) 2018-08-16 12:10:56 -07:00
brianvans
801eddf5f8 Add ha_enabled for mysql backend (#5122)
* Slight cleanup around mysql ha lock implementation

* Removes some duplication around lock table naming
* Escapes lock table name with backticks to handle weird characters
* Lock table defaults to regular table name + "_lock"
* Drop lock table after tests run

* Add `ha_enabled` option for mysql storage

It defaults to false, and we gate a few things like creating the lock
table and preparing lock related statements on it
2018-08-16 11:03:16 -07:00
Matthew Irish
c3e733623e
UI namespaces (#5119)
* add namespace sidebar item

* depend on ember-inflector directly

* list-view and list-item components

* fill out components and render empty namespaces page

* list namespaces in access

* add menu contextual component to list item

* popup contextual component

* full crud for namespaces

* add namespaces service and picker component

* split application and vault.cluster templates and controllers, add namespace query param, add namespace-picker to vault.namespace template

* remove usage of href-to

* remove ember-href-to from deps

* add ember-responsive

* start styling the picker and link to appropriate namespaces, use ember-responsive to render picker in different places based on the breakpoint

* get query param working and save ns to authdata when authenticating, feed through ns in application adapter

* move to observer on the controller for setting state on the service

* set state in the beforeModel hook and clear the ember data model cache

* nav to secrets on change and make error handling more resilient utilizing the method that atlas does to eagerly update URLs

* add a list of sys endpoints in a helper

* hide header elements if not in the root namespace

* debounce namespace input on auth, fix 404 for auth method fetch, move auth method fetch to a task on the auth-form component and refretch on namespace change

* fix display of supported engines and exclusion of sys and identity engines

* don't fetch replication status if you're in a non-root namespace

* hide seal sub-menu if not in the root namespace

* don't autocomplete auth form inputs

* always send some requests to the root namespace

* use methodType and engineType instead of type in case there it is ns_ prefixed

* use sys/internal/ui/namespaces to fetch the list in the dropdown

* don't use model for namespace picker and always make the request to the token namespace

* fix header handling for fetch calls

* use namespace-reminder component on creation and edit forms throughout the application

* add namespace-reminder to the console

* add flat

* add deepmerge for creating the tree in the menu

* delayed rendering for animation timing

* design and code feedback on the first round

* white text in the namespace picker

* fix namespace picker issues with root keys

* separate path-to-tree

* add tests for path-to-tree util

* hide picker if you're in the root ns and you can't access other namespaces

* show error message if you enter invalid characters for namespace path

* return a different model if we dont have the namespaces feature and show upgrade page

* if a token has a namespace_path, use that as the root user namespace and transition them there on login

* use token namespace for user, but use specified namespace to log in

* always renew tokens in the token namespace

* fix edition-badge test
2018-08-16 12:48:24 -05:00
Joshua Ogle
7f2a5c2f76
Merge pull request #5110 from hashicorp/ui-tier-icons
Update Edition Tier Icons
2018-08-16 10:44:34 -06:00
Joshua Ogle
c5a8d73c71 Fix footer upgrade link 2018-08-16 10:43:46 -06:00