Jeff Mitchell
|
2d4c390f87
|
More updates to mutexes and adjust blacklisted roletag default safety buffer
|
2016-05-05 14:12:22 -04:00 |
|
Jeff Mitchell
|
8fef6e3ac0
|
Rename identity whitelist and roletag blacklist api endpoints
|
2016-05-05 13:34:50 -04:00 |
|
Jeff Mitchell
|
c69ba40d05
|
Move some mutexes around
|
2016-05-05 12:53:27 -04:00 |
|
Jeff Mitchell
|
f689e4712d
|
Update some mutexes in client config
|
2016-05-05 12:44:40 -04:00 |
|
Jeff Mitchell
|
c15c227774
|
Fall back to non-base64 cert if it can't be decoded (it's checked later anyways)
|
2016-05-05 11:36:28 -04:00 |
|
Jeff Mitchell
|
25913fb18c
|
Update commenting
|
2016-05-05 11:22:36 -04:00 |
|
Jeff Mitchell
|
15cbcedf1f
|
Make the roletag blacklist the longest duration, not least
|
2016-05-05 11:00:41 -04:00 |
|
Jeff Mitchell
|
e45d6c1120
|
Switch client code to shared awsutil code
|
2016-05-05 10:40:49 -04:00 |
|
Jeff Mitchell
|
4600ca8073
|
Merge branch 'master-oss' into aws-auth-backend
|
2016-05-05 10:36:06 -04:00 |
|
Jeff Mitchell
|
b6b9cd6f1f
|
Merge remote-tracking branch 'origin/master' into aws-cred-chain
|
2016-05-05 10:31:12 -04:00 |
|
Jeff Mitchell
|
3e71221839
|
Merge remote-tracking branch 'origin/master' into aws-auth-backend
|
2016-05-05 10:04:52 -04:00 |
|
vishalnayak
|
92fe94546c
|
Split SanitizeTTL method to support time.Duration parameters as well
|
2016-05-05 09:45:48 -04:00 |
|
vishalnayak
|
4ede1d6f08
|
Add the steps to generate the CRL test's test-fixture files
|
2016-05-04 05:48:34 -04:00 |
|
vishalnayak
|
b7c48ba109
|
Change image/ to a more flexible /role endpoint
|
2016-05-03 23:36:59 -04:00 |
|
Jeff Mitchell
|
1b0df1d46f
|
Cleanups, add shared provider, ability to specify http client, and port S3 physical backend over
|
2016-05-03 17:01:02 -04:00 |
|
Jeff Mitchell
|
7fbe5d2eaa
|
Region is required so error in awsutil if not set and set if empty in client code in logical/aws
|
2016-05-03 15:25:11 -04:00 |
|
Jeff Mitchell
|
a244ef8a00
|
Refactor AWS credential code into a function that returns a static->env->instance chain
|
2016-05-03 15:10:35 -04:00 |
|
Jeff Mitchell
|
45a120f491
|
Switch our tri-copy ca loading code to go-rootcerts
|
2016-05-03 12:23:25 -04:00 |
|
vishalnayak
|
9f2a111e85
|
Allow custom endpoint URLs to be supplied to make EC2 API calls
|
2016-05-02 17:21:52 -04:00 |
|
vishalnayak
|
57e8fcd8c2
|
Extend the expiry of test-fixture certs of Cert backend
|
2016-05-02 12:34:46 -04:00 |
|
Jeff Mitchell
|
3d1c88f315
|
Make GitHub org comparison case insensitive.
Fixes #1359
|
2016-05-02 00:18:31 -04:00 |
|
vishalnayak
|
1c91f652d4
|
Remove unnecessary append call
|
2016-04-30 03:20:21 -04:00 |
|
vishalnayak
|
fde768125c
|
Cert backend, CRL tests
|
2016-04-29 02:32:48 -04:00 |
|
vishalnayak
|
23d8ce62a3
|
Ensure that the instance is running during renewal
|
2016-04-28 16:34:35 -04:00 |
|
vishalnayak
|
2a2dc0befb
|
Added allow_instance_migration to the role tag
|
2016-04-28 11:43:48 -04:00 |
|
vishalnayak
|
4161d3ef4f
|
Change all time references to UTC
|
2016-04-28 10:19:29 -04:00 |
|
vishalnayak
|
e591632630
|
Fix the deadlock issue
|
2016-04-28 01:01:33 -04:00 |
|
vishalnayak
|
4712533f1d
|
minor updates
|
2016-04-28 00:35:49 -04:00 |
|
vishalnayak
|
e6a9a5957d
|
Refactor locks around config tidy endpoints
|
2016-04-27 22:32:43 -04:00 |
|
vishalnayak
|
b75a6e2f0f
|
Fix locking around config/client
|
2016-04-27 22:25:15 -04:00 |
|
vishalnayak
|
0e97b57beb
|
Fix the list response of role tags
|
2016-04-27 22:03:11 -04:00 |
|
vishalnayak
|
779d73ce2b
|
Removed existence check on blacklist/roletags, docs fixes
|
2016-04-27 21:29:32 -04:00 |
|
vishalnayak
|
d44326ded6
|
Remove unnecessary lock switching around flushCachedEC2Clients
|
2016-04-27 20:13:56 -04:00 |
|
vishalnayak
|
e1080f86ed
|
Remove recreate parameter from clientEC2
|
2016-04-27 20:01:39 -04:00 |
|
vishalnayak
|
441477f342
|
Added ami_id to token metadata
|
2016-04-27 11:32:05 -04:00 |
|
vishalnayak
|
7144fd54f9
|
Added tests
|
2016-04-26 23:40:11 -04:00 |
|
vishalnayak
|
88942b0503
|
Added tests
|
2016-04-26 10:22:29 -04:00 |
|
vishalnayak
|
5a676a129e
|
Added tests
|
2016-04-26 10:22:29 -04:00 |
|
vishalnayak
|
e16f256b14
|
Added tests
|
2016-04-26 10:22:29 -04:00 |
|
vishalnayak
|
3a4021d6c4
|
Added tests
|
2016-04-26 10:22:29 -04:00 |
|
vishalnayak
|
de1a1be564
|
tidy endpoint fixes
|
2016-04-26 10:22:29 -04:00 |
|
vishalnayak
|
044d01fd69
|
HMAC Key per AMI ID and avoided secondary call to AWS to fetch the tags
|
2016-04-26 10:22:29 -04:00 |
|
vishalnayak
|
5996c3e9d8
|
Rework and refactoring
|
2016-04-26 10:22:29 -04:00 |
|
vishalnayak
|
3aeae62c00
|
Added mutex locking for config/certificate endpoint
|
2016-04-26 10:22:29 -04:00 |
|
vishalnayak
|
21854776af
|
Added cooldown period for periodic tidying operation
|
2016-04-26 10:22:29 -04:00 |
|
vishalnayak
|
9aa8fb6cc1
|
Support periodic tidy callback and config endpoints.
|
2016-04-26 10:22:29 -04:00 |
|
vishalnayak
|
2810196e0f
|
Use fullsailor/pkcs7 package instead of its fork. Fix tests
|
2016-04-26 10:22:29 -04:00 |
|
vishalnayak
|
5a2e1340df
|
Removed redundant AWS public certificate. Docs update.
|
2016-04-26 10:22:29 -04:00 |
|
vishalnayak
|
a456f2c3f6
|
Removed `region` parameter from `config/client` endpoint.
Region to create ec2 client objects is fetched from the identity document.
Maintaining a map of cached clients indexed by region.
|
2016-04-26 10:22:29 -04:00 |
|
vishalnayak
|
790b143c75
|
Instance ID can optionally be accepted as a the role tag parameter.
|
2016-04-26 10:22:29 -04:00 |