luxolus/open-vault
2
0
Fork 0
Code Issues 1 Pull requests Releases Activity
12715 commits 1 branch 0 tags 214 MiB
Commit graph

12715 commits

This branch
This branch
All branches
Author SHA1 Message Date
Sorin Dumitru bb92e8840a
plugin: fix process leak when Setup() fails (#9557) 
We've noticed some leftover processes from vault plugins on our boxes. Some
of them were even left over from previous instances of the service and reparented
to init.  This could cause issues if too many of them accumulate.

When running with TRACE logging the logs showed that there was an error return by
the call to Setup() the plugin. Looking through the code it looks like we do not
call Cleanup() in that case.

Co-authored-by: Sorin Dumitru <sorindumitru@users.noreply.github.com>
 2020-07-22 10:29:50 -04:00
Alexander Bezobchuk b642b1ddd7
Merge PR #9544: docs: add pages to sidebar 2020-07-22 09:28:56 -04:00
Meggie 692200c47b
Link to release notes on downloads page (#9546) 
* Link to release notes on downloads page

* Per Jeff E's comment linking to index
 2020-07-21 18:11:32 -04:00
Mark Gritter b11b8b5cbc
changelog++ 2020-07-21 16:12:43 -05:00
ncabatoff be54fdd3a8
changelog++ 2020-07-21 16:32:07 -04:00
ncabatoff 3fbc0f35c2
Make runTransit tolerate a non-core-0 leader. (#9548) 2020-07-21 15:50:01 -04:00
Austin Gebauer 66c8032fb5
docs: specify which JWT/OIDC role params support JSON pointer syntax in API docs (#9518) 2020-07-21 11:20:10 -07:00
Brian Kassouf fd72d92434
raft: Fix some snapshot restore issues (#9533) 
* raft: Remove double read lock

* Reload TLS keyring after reloading the barrier keys
 2020-07-21 10:59:07 -07:00
Meggie 47da2ec745
Update CHANGELOG.md 2020-07-21 13:37:28 -04:00
Austin Gebauer 87172c3fbb
docs: changes the default alias names in the GCP auth API docs to role_id for both IAM and GCE (#9494) 2020-07-21 10:22:24 -07:00
ncabatoff abcb0607a7
Persist the jsonfile of test2json output for debugging. (#9542) 2020-07-21 13:18:17 -04:00
Mike Jarmy a3ab902e18
set path properly in NewRaftBackend() (#9128) 
* set path properly in NewRaftBackend()

* get rid of storeLatestState
 2020-07-21 12:48:24 -04:00
Jason O'Donnell a3e0620cd4
doc: add k8s probe notes to helm doc (#9543) 2020-07-21 12:40:43 -04:00
Meggie 259aa74728
docs: add release notes (#9540) 
* Create nav for release notes

* Update 1.5.0.mdx

Initial release notes

* Update 1.5.0.mdx

Minor edits

* Update 1.5.0.mdx

Made a small grammatical edit

* Update 1.5.0.mdx

Changed a period to a colon

* Update 1.5.0.mdx

Some minor formatting changes

* Update 1.5.0.mdx

Changes to the Splunk app description

* Update 1.5.0.mdx

Small change to the vault monitor command description

* Update 1.5.0.mdx

Small change to the description of the vault monitor command

* Update 1.5.0.mdx

Added link to the Splunk app for Monitoring Vault

* Updating version

* Capitalization consistency

Co-authored-by: Andy Manoske <andy@hashicorp.com>
Co-authored-by: Darshana Sivakumar <darshana10@gmail.com>
 2020-07-21 12:23:03 -04:00
ncabatoff 46c00ecab4
Set an env var we can use to see if we're running in -race mode. (#9488) 2020-07-21 10:50:28 -04:00
Jason O'Donnell 13cc4295b5
doc: remove beta warnings for openshift (#9541) 2020-07-21 10:43:41 -04:00
ncabatoff d2436a9c56
Make standbyStopCh atomic to avoid data races (#9539) 2020-07-21 08:34:07 -04:00
ncabatoff b29f188b9a
Remove now unused ReplicationStaleReadTimeout (#9537) 2020-07-21 07:38:31 -04:00
ncabatoff b02652058b
Prevent panic due to upgrading existing kv mount to v2. (#9536) 2020-07-20 16:35:26 -04:00
Jason O'Donnell bbec78261b
Add docker dev build targets (#9426) 
* Add docker dev build target

* Update scripts/docker/Dockerfile

Co-authored-by: Jim Kalafut <jkalafut@hashicorp.com>

* Add multi-stage build

* Add comment about multi-stage

* Add docker-dev-ui

Co-authored-by: Jim Kalafut <jkalafut@hashicorp.com>
 2020-07-20 14:11:34 -04:00
ncabatoff d777708fde
Improve logging, and add polling to the post-stepdown leader check. (#9530) 2020-07-20 12:44:23 -04:00
ncabatoff c248cf0454
Move to Go 1.14.6. (#9527) 2020-07-20 10:38:59 -04:00
ncabatoff a31fd27069
Use the accessor method so state lock is used to check perf standby status. (#9496) 2020-07-20 10:34:16 -04:00
ncabatoff 3ddc837ce3
Make sure cluster is stopped before wiping storage. (#9526) 2020-07-20 09:32:38 -04:00
Noelle Daley c2625bff38
Update CHANGELOG.md 2020-07-17 13:30:22 -07:00
Noelle Daley a18efdca53
UI/transit add missed algorithms follow up (#9520) 
* fix NaN error for version history of aes128-gcm96 transit secrets

* convert aes128-gcm96 keys to milliseconds to work with date-frmo-now helper
 2020-07-17 13:25:39 -07:00
Jeff Mitchell 3ad2e6a907
Revert "Revert "Get rid of sdk internal reloadutil package for now. (#9515)" (#9521)" (#9522) 
This reverts commit f687267c8086b63ee10043b42918ea0a63956c39.
 2020-07-17 15:42:41 -04:00
Jeff Mitchell dc8aa4e8c2 Fix broken api reference in go.mod 2020-07-17 15:31:04 -04:00
Jeff Mitchell a9bb72b891
Revert "Get rid of sdk internal reloadutil package for now. (#9515)" (#9521) 
This reverts commit fa39e7bce02301cd795fa9ccbb2a55ff92ea13c6.
 2020-07-17 15:18:44 -04:00
ncabatoff 22c15c85ac
Get rid of sdk internal reloadutil package for now. (#9515) 2020-07-17 15:16:15 -04:00
Mark bdfd9c3479
UI Transit: Add missed algorithms (#9070) 
Co-authored-by: Noelle Daley <noelledaley@users.noreply.github.com>
 2020-07-17 12:12:12 -07:00
Scott Miller fdb2fc612e
API and upgrade docs for global plugin reload (#9487) 2020-07-17 13:39:24 -05:00
Vishal Nayak 14779e9f9d
Remove prefix for exception paths; add sys/internal/ui/mounts (#9512) 2020-07-17 10:55:38 -04:00
Austin Gebauer 6bc9696a51
Replaces storage backend with secrets engine in the gcp secrets docs (#9511) 2020-07-16 17:43:47 -07:00
Calvin Leung Huang 46a52a6098
sdk/gomod: remove dependency on vault (#9449) 
* sdk/gomod: remove dependency on vault

* add vendored deps

* sdk/testing: move reloadutil into internal package

* re-vendor moved files
 2020-07-16 16:24:07 -07:00
Austin Gebauer dbb43f8efe
changelog++ 2020-07-16 13:40:56 -07:00
Austin Gebauer fe3a765369
Updates the GCP auth plugin (#9507) 2020-07-16 12:38:44 -07:00
Mike Jarmy 93ff4c098c
Add a lock to seal migration (#9485) 
* add a lock to seal migration

* switch to CompareAndSwapInt32

* switch to uber go-atomic
 2020-07-16 15:14:29 -04:00
Alexander Bezobchuk ea13485c7d
Merge PR #9502: Resource Quotas: Remove 'burst' Param from Rate Limiter 2020-07-16 14:34:43 -04:00
Angel Garbarino aea8a8540a
remove default value based on workflow discussions (#9493) 2020-07-16 11:11:23 -06:00
Freddy 59ffc7af5c
Allow consul repo override via env (#9500) 2020-07-16 10:48:12 -04:00
Rodrigo D. L 95585aeb63
Adding a Clone() function to the request hanlder to be used when theres a need to modify the current request before saving it (#9499) 2020-07-16 09:53:46 -04:00
Scott Miller 055fa80aa1
Add CL entry for mount_type addition (#9489) 2020-07-15 13:12:35 -05:00
Vishal Nayak 4e4cb5289a
Fetch quota by name before updating it (#9466) 
* Fix quotas update

* Update doc
 2020-07-15 13:25:00 -04:00
Mike Jarmy 11b10f21b7
Update the seal migration docs (#9432) 
* update the seal migration docs

* Update website/pages/docs/concepts/seal.mdx

Co-authored-by: Alexander Bezobchuk <alexanderbez@users.noreply.github.com>

Co-authored-by: Alexander Bezobchuk <alexanderbez@users.noreply.github.com>
 2020-07-15 11:55:28 -04:00
ncabatoff 064cc4afb3
Correct template server entry 
GH-9200 was backported and released first in 1.4.3.
 2020-07-14 18:06:57 -04:00
Mark Gritter c4dbbccef3
Remove namespace from mount_point label. (#9436) 
* Remove namespace from mount_point label.
* Fix the other two places where vault.token.creation is emitted.
 2020-07-14 14:28:11 -05:00
ncabatoff 36528cf9ec
Don't override MaxWait, its default is good for CI (#9478) 2020-07-14 14:21:37 -04:00
Theron Voran fa835fc066
changelog++ 
for 1.4.4
 2020-07-14 09:04:03 -07:00
Angel Garbarino 6a50e90a58
Update CHANGELOG.md 2020-07-14 09:06:11 -06:00