mirror of
https://github.com/hashicorp/vault.git
synced 2025-08-16 19:47:02 +02:00
63ccb60b9a
* Add WrapKey capabilities to keysutil This allows one keysutil to wrap another key, assuming that key has an type matching one of keysutil's allowed KeyTypes. This allows completing the BYOK import loop with Transit, allowing imported wrapping keys to export (wrap) other keys in transit, without having them leave in plaintext. Signed-off-by: Alexander Scheel <alex.scheel@hashicorp.com> * Add /byok-export/:dst/:src[/:version] to Transit Still respecting exportable, we allow encrypted-only export of transit keys to another cluster using the BYOK semantics. In particular, this allows an operator to securely establish key material between two separate Transit installations. This potentially allows one cluster to be used as a source cluster (encrypting a large amount of data) and a second cluster to decrypt this data later. This might be useful in hybrid or site-specific deployments of Vault for instance. Signed-off-by: Alexander Scheel <alex.scheel@hashicorp.com> * Add missing dependency to sdk/, vault/ Also updates to a newer version while we're here. Signed-off-by: Alexander Scheel <alex.scheel@hashicorp.com> * Add documentation on BYOK export Signed-off-by: Alexander Scheel <alex.scheel@hashicorp.com> * Add tests for BYOK export/import Signed-off-by: Alexander Scheel <alex.scheel@hashicorp.com> * Add changelog entry Signed-off-by: Alexander Scheel <alex.scheel@hashicorp.com> * Update website/content/api-docs/secret/transit.mdx * Update builtin/logical/transit/path_byok.go Co-authored-by: Matt Schultz <975680+schultz-is@users.noreply.github.com> --------- Signed-off-by: Alexander Scheel <alex.scheel@hashicorp.com> Co-authored-by: Matt Schultz <975680+schultz-is@users.noreply.github.com>
97 lines
4.1 KiB
Modula-2
97 lines
4.1 KiB
Modula-2
module github.com/hashicorp/vault/sdk
|
|
|
|
go 1.19
|
|
|
|
require (
|
|
github.com/armon/go-metrics v0.4.1
|
|
github.com/armon/go-radix v1.0.0
|
|
github.com/cenkalti/backoff/v3 v3.2.2
|
|
github.com/docker/docker v23.0.4+incompatible
|
|
github.com/docker/go-connections v0.4.0
|
|
github.com/evanphx/json-patch/v5 v5.6.0
|
|
github.com/fatih/structs v1.1.0
|
|
github.com/go-ldap/ldap/v3 v3.4.1
|
|
github.com/go-test/deep v1.1.0
|
|
github.com/golang/protobuf v1.5.2
|
|
github.com/golang/snappy v0.0.4
|
|
github.com/google/tink/go v1.7.0
|
|
github.com/hashicorp/errwrap v1.1.0
|
|
github.com/hashicorp/go-cleanhttp v0.5.2
|
|
github.com/hashicorp/go-hclog v1.4.0
|
|
github.com/hashicorp/go-immutable-radix v1.3.1
|
|
github.com/hashicorp/go-kms-wrapping/entropy/v2 v2.0.0
|
|
github.com/hashicorp/go-kms-wrapping/v2 v2.0.8
|
|
github.com/hashicorp/go-multierror v1.1.1
|
|
github.com/hashicorp/go-plugin v1.4.8
|
|
github.com/hashicorp/go-retryablehttp v0.7.1
|
|
github.com/hashicorp/go-secure-stdlib/base62 v0.1.2
|
|
github.com/hashicorp/go-secure-stdlib/mlock v0.1.2
|
|
github.com/hashicorp/go-secure-stdlib/parseutil v0.1.7
|
|
github.com/hashicorp/go-secure-stdlib/password v0.1.1
|
|
github.com/hashicorp/go-secure-stdlib/strutil v0.1.2
|
|
github.com/hashicorp/go-secure-stdlib/tlsutil v0.1.2
|
|
github.com/hashicorp/go-sockaddr v1.0.2
|
|
github.com/hashicorp/go-uuid v1.0.3
|
|
github.com/hashicorp/go-version v1.6.0
|
|
github.com/hashicorp/golang-lru v0.5.4
|
|
github.com/hashicorp/hcl v1.0.1-vault-5
|
|
github.com/hashicorp/vault/api v1.9.1
|
|
github.com/mitchellh/copystructure v1.2.0
|
|
github.com/mitchellh/go-testing-interface v1.14.1
|
|
github.com/mitchellh/mapstructure v1.5.0
|
|
github.com/pierrec/lz4 v2.6.1+incompatible
|
|
github.com/ryanuber/go-glob v1.0.0
|
|
github.com/stretchr/testify v1.8.2
|
|
go.uber.org/atomic v1.9.0
|
|
golang.org/x/crypto v0.6.0
|
|
golang.org/x/net v0.8.0
|
|
golang.org/x/text v0.8.0
|
|
google.golang.org/grpc v1.53.0
|
|
google.golang.org/protobuf v1.28.1
|
|
)
|
|
|
|
require (
|
|
github.com/Azure/go-ntlmssp v0.0.0-20200615164410-66371956d46c // indirect
|
|
github.com/Microsoft/go-winio v0.6.1 // indirect
|
|
github.com/containerd/containerd v1.7.0 // indirect
|
|
github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc // indirect
|
|
github.com/docker/distribution v2.8.1+incompatible // indirect
|
|
github.com/docker/go-units v0.5.0 // indirect
|
|
github.com/fatih/color v1.13.0 // indirect
|
|
github.com/frankban/quicktest v1.11.3 // indirect
|
|
github.com/go-asn1-ber/asn1-ber v1.5.1 // indirect
|
|
github.com/gogo/protobuf v1.3.2 // indirect
|
|
github.com/hashicorp/go-rootcerts v1.0.2 // indirect
|
|
github.com/hashicorp/yamux v0.0.0-20211028200310-0bc27b27de87 // indirect
|
|
github.com/klauspost/compress v1.16.5 // indirect
|
|
github.com/kr/text v0.2.0 // indirect
|
|
github.com/mattn/go-colorable v0.1.13 // indirect
|
|
github.com/mattn/go-isatty v0.0.17 // indirect
|
|
github.com/mitchellh/go-homedir v1.1.0 // indirect
|
|
github.com/mitchellh/reflectwalk v1.0.2 // indirect
|
|
github.com/moby/patternmatcher v0.5.0 // indirect
|
|
github.com/moby/sys/sequential v0.5.0 // indirect
|
|
github.com/moby/term v0.0.0-20221205130635-1aeaba878587 // indirect
|
|
github.com/morikuni/aec v1.0.0 // indirect
|
|
github.com/niemeyer/pretty v0.0.0-20200227124842-a10e7caefd8e // indirect
|
|
github.com/oklog/run v1.1.0 // indirect
|
|
github.com/opencontainers/go-digest v1.0.0 // indirect
|
|
github.com/opencontainers/image-spec v1.1.0-rc2.0.20221005185240-3a7f492d3f1b // indirect
|
|
github.com/opencontainers/runc v1.1.6 // indirect
|
|
github.com/pkg/errors v0.9.1 // indirect
|
|
github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2 // indirect
|
|
github.com/rogpeppe/go-internal v1.8.1 // indirect
|
|
github.com/sirupsen/logrus v1.9.0 // indirect
|
|
github.com/stretchr/objx v0.5.0 // indirect
|
|
golang.org/x/mod v0.8.0 // indirect
|
|
golang.org/x/sys v0.6.0 // indirect
|
|
golang.org/x/term v0.6.0 // indirect
|
|
golang.org/x/time v0.0.0-20220411224347-583f2d630306 // indirect
|
|
golang.org/x/tools v0.6.0 // indirect
|
|
google.golang.org/genproto v0.0.0-20230306155012-7f2fa6fef1f4 // indirect
|
|
gopkg.in/check.v1 v1.0.0-20200227125254-8fa46927fb4f // indirect
|
|
gopkg.in/square/go-jose.v2 v2.6.0 // indirect
|
|
gopkg.in/yaml.v3 v3.0.1 // indirect
|
|
gotest.tools/v3 v3.4.0 // indirect
|
|
)
|