Commit graph

3421 commits

Author SHA1 Message Date
Steve Jansen 597d59962c Adds sts:AssumeRole support to the AWS secret backend
Support use cases where you want to provision STS tokens
using Vault, but, you need to call AWS APIs that are blocked
for federated tokens.  For example, STS federated tokens cannot
invoke IAM APIs, such as  Terraform scripts containing
`aws_iam_*` resources.
2016-05-05 23:32:41 -04:00
Jeff Mitchell f6f5889c8c changelog++ 2016-05-05 10:35:22 -04:00
Jeff Mitchell 125fb69d25 Merge pull request #1374 from hashicorp/aws-cred-chain
AWS cred chain helper
2016-05-05 10:34:07 -04:00
Jeff Mitchell 80407eeba8 Fix up commenting 2016-05-05 10:31:50 -04:00
Jeff Mitchell b6b9cd6f1f Merge remote-tracking branch 'origin/master' into aws-cred-chain 2016-05-05 10:31:12 -04:00
Jeff Mitchell c70c85b6c7 Merge pull request #1381 from hashicorp/util-update
Updates to policy and string helpers
2016-05-05 10:29:10 -04:00
vishalnayak 314a1f9406 Updates to policy and string helpers 2016-05-05 10:22:28 -04:00
Jeff Mitchell 00e666425b Merge pull request #1380 from hashicorp/refactor-sanitize-ttl
Split SanitizeTTL method to support time.Duration parameters as well
2016-05-05 10:00:25 -04:00
vishalnayak 92fe94546c Split SanitizeTTL method to support time.Duration parameters as well 2016-05-05 09:45:48 -04:00
vishalnayak 0cec22d27a Lower case all policy values in ParsePolicies before processing 2016-05-05 05:22:59 -04:00
Jeff Mitchell bd6f1bbd08 Merge pull request #1376 from janstenpickle/patch-1
Add scala vault library to list of client libs
2016-05-04 14:40:19 -04:00
Chris Jansen ea21dec7b4 Add scala vault library to list of client libs 2016-05-04 18:04:28 +01:00
vishalnayak 4ede1d6f08 Add the steps to generate the CRL test's test-fixture files 2016-05-04 05:48:34 -04:00
Jeff Mitchell 3600b2573d Update website docs re token store role period parsing 2016-05-04 02:17:20 -04:00
Jeff Mitchell 47a7ada7e8 Fix number of recovery shares output during init 2016-05-03 23:07:09 -04:00
Jeff Mitchell 1b0df1d46f Cleanups, add shared provider, ability to specify http client, and port S3 physical backend over 2016-05-03 17:01:02 -04:00
Jeff Mitchell 7fbe5d2eaa Region is required so error in awsutil if not set and set if empty in client code in logical/aws 2016-05-03 15:25:11 -04:00
Jeff Mitchell 60a584a0a7 changelog++ 2016-05-03 15:12:08 -04:00
Jeff Mitchell d8220ccfec Merge pull request #1371 from hashicorp/auth-mount-tuning
Properly persist auth mount tuning
2016-05-03 15:11:20 -04:00
Jeff Mitchell a244ef8a00 Refactor AWS credential code into a function that returns a static->env->instance chain 2016-05-03 15:10:35 -04:00
Jeff Mitchell 034c2d93cd changelog++ 2016-05-03 14:42:31 -04:00
Jeff Mitchell 7ddf4c6250 Merge pull request #1372 from hashicorp/fix-sigint-sighup
Properly handle sigint/hup
2016-05-03 14:40:27 -04:00
Jeff Mitchell 2bbb39f4af Properly handle sigint/hup 2016-05-03 14:30:58 -04:00
Jeff Mitchell 1bc2abecd5 Properly persist auth mount tuning 2016-05-03 14:24:04 -04:00
Jeff Mitchell 28279d193e Update deps 2016-05-03 13:23:05 -04:00
Jeff Mitchell ff63e83ffa Merge pull request #1370 from hashicorp/go-rootcerts
Switch our tri-copy ca loading code to go-rootcerts
2016-05-03 13:11:10 -04:00
Jeff Mitchell 45a120f491 Switch our tri-copy ca loading code to go-rootcerts 2016-05-03 12:23:25 -04:00
Jeff Mitchell 6ef30efae6 Bump deps. 2016-05-02 20:11:05 -04:00
Jeff Mitchell 41d046fb3a changelog++ 2016-05-02 20:02:36 -04:00
Jeff Mitchell 3e0667a6bd Merge pull request #1368 from hashicorp/issue-1365
In a list response, if there are no keys, 404 to be consistent with GET
2016-05-02 20:01:06 -04:00
Jeff Mitchell 7e462e566b Check nil keys and respond internal error if it can't be cast to a []string 2016-05-02 20:00:46 -04:00
Jeff Mitchell 16b717022b In a list response, if there are no keys, 404 to be consistent with GET
and with different backend conditions

Fixes #1365
2016-05-02 19:38:06 -04:00
Jeff Mitchell a9256f14b3 Merge pull request #1366 from hashicorp/sethvargo/elink
Track enhanced links
2016-05-02 16:03:59 -04:00
Seth Vargo 45ac1bc151
Track enhanced links 2016-05-02 15:57:23 -04:00
Vishal Nayak ab809788c7 Merge pull request #1363 from hashicorp/fix-cert-tests
Extend the expiry of test-fixture certs of Cert backend
2016-05-02 13:11:47 -04:00
vishalnayak 57e8fcd8c2 Extend the expiry of test-fixture certs of Cert backend 2016-05-02 12:34:46 -04:00
Jeff Mitchell 0a2e78f8d8 changelog++ 2016-05-02 00:20:00 -04:00
Jeff Mitchell bbf79d8291 Merge pull request #1362 from hashicorp/issue-1359
Make GitHub org comparison case insensitive.
2016-05-02 00:19:22 -04:00
Jeff Mitchell 3d1c88f315 Make GitHub org comparison case insensitive.
Fixes #1359
2016-05-02 00:18:31 -04:00
Jeff Mitchell 74c59d4336 Merge pull request #1361 from hashicorp/issue-1360
Fix help text around preference of ca-cert/ca-path.
2016-05-02 00:09:40 -04:00
Jeff Mitchell 36f97a024a Fix help text around preference of ca-cert/ca-path.
Fixes #1360
2016-05-02 00:08:59 -04:00
Jeff Mitchell 5f5e898aae Merge pull request #1357 from hashicorp/cert-crl-test
Cert backend, CRL tests
2016-04-29 09:50:48 -04:00
vishalnayak fde768125c Cert backend, CRL tests 2016-04-29 02:32:48 -04:00
Jeff Mitchell 6602aea52b changelog++ 2016-04-28 15:28:44 -04:00
Jeff Mitchell b2723b4e55 Merge pull request #1356 from hashicorp/token-store-lookup-params
Fix fetching parameters in token store when it's optionally in the URL
2016-04-28 15:27:43 -04:00
Jeff Mitchell 81da06de05 Fix fetching parameters in token store when it's optionally in the URL 2016-04-28 15:15:37 -04:00
Jeff Mitchell 749b60d57d Ensure seal finalizing happens even when using verify-only 2016-04-28 14:06:05 -04:00
Jeff Mitchell 4a409ebb81 Fix some rekey testing expected seal type logic 2016-04-28 17:13:03 +00:00
Jeff Mitchell 6141075082 Explicitly toggle cgo in makefile 2016-04-28 16:54:34 +00:00
Jeff Mitchell 91c41f12d4 minor fix for expected barrier type in rekey test 2016-04-28 16:52:32 +00:00