luxolus/open-vault
2
0
Fork 0
Code Issues 1 Pull requests Releases Activity
3722 commits 1 branch 0 tags 214 MiB
Commit graph

3722 commits

This branch
This branch
All branches
Author SHA1 Message Date
Jeff Mitchell 5570fa1e6e Merge branch 'master-oss' into cubbyhole-the-world 2016-05-19 12:26:10 -04:00
Jeff Mitchell 8f592f3442 Don't use pointers to int64 in function calls when not necessary 2016-05-19 12:26:02 -04:00
Jeff Mitchell 964916674e changelog++ 2016-05-19 12:18:02 -04:00
Jeff Mitchell a13807e759 Merge pull request #1318 from steve-jansen/aws-logical-assume-role 
Add sts:AssumeRole support to the AWS secret backend
 2016-05-19 12:17:27 -04:00
Jeff Mitchell 10d8b38309 changelog++ 2016-05-19 12:16:25 -04:00
Jeff Mitchell 1bef0c3584 Merge pull request #1245 from LeonDaniel/master 
Improved groups search for LDAP login
 2016-05-19 12:13:29 -04:00
Jeff Mitchell 05b2d4534c Add unwrap test function and some robustness around paths for the wrap lookup function 2016-05-19 11:49:46 -04:00
Jeff Mitchell 0da8762bd5 Add unwrap command, and change how the response is embedded (as a string, not an object) 2016-05-19 11:25:15 -04:00
Jeff Mitchell a655a17d17 Merge pull request #1431 from F21/patch-1 
Minor grammar fix to vault vs custom solution comparison.
 2016-05-19 03:04:08 -04:00
Francis Chuang ae1d5a8fea Minor grammar fix. 2016-05-19 17:01:30 +10:00
Jeff Mitchell 2e6ac4c37a Remove wrap specs from backend response 2016-05-19 03:06:09 +00:00
Jeff Mitchell dce8a8da42 Merge branch 'master-oss' into cubbyhole-the-world 2016-05-19 02:43:22 +00:00
Jeff Mitchell 6d790ddaad changelog++ 2016-05-18 01:00:58 +00:00
Jeff Mitchell 91b65a893e Merge pull request #1430 from hashicorp/issue-1428 
Use Consul API client's DefaultNonPooledTransport.
 2016-05-17 20:59:50 -04:00
Jeff Mitchell 86e078ff98 Use Consul API client's DefaultNonPooledTransport. 
What we should probably do is create a client with a mutex and
invalidate it when parameters change rather than creating a client over
and over...that can be a TODO for later but for now this fix suffices.

Fixes #1428
 2016-05-18 00:47:42 +00:00
Vishal Nayak 5b7b010fbb Merge pull request #1429 from hashicorp/locked-non-locked 
aws-auth: naming of the locked and non-locked methods.
 2016-05-17 17:46:40 -07:00
vishalnayak 65801942cb Naming of the locked and nonLocked methods 2016-05-17 20:39:24 -04:00
Jeff Mitchell 665672a8c2 Merge pull request #1427 from hashicorp/refresh-interval 
Rename lease_duration to refresh_interval when there is no lease ID, …
 2016-05-17 13:39:56 -04:00
Jeff Mitchell 0168b74e03 Rename lease_duration to refresh_interval when there is no lease ID, and output ---- between header and values 2016-05-17 17:10:12 +00:00
Jeff Mitchell 0276dc37b3 Merge pull request #1424 from hashicorp/sethvargo/training 
Add note about paid training
 2016-05-16 17:30:33 -04:00
Seth Vargo 888527f9d4
Add note about paid training 2016-05-16 16:45:02 -04:00
Jeff Mitchell 4ab973565e changelog++ 2016-05-16 16:23:01 -04:00
Jeff Mitchell ed574d63fe Merge pull request #1416 from shomron/list_ldap_group_mappings 
Support listing ldap group to policy mappings
 2016-05-16 16:22:13 -04:00
Jeff Mitchell 72cfd19078 Add some comments to sanitize 2016-05-16 16:12:45 -04:00
Jeff Mitchell c4431a7e30 Address most review feedback. Change responses to multierror to better return more useful values when there are multiple errors 2016-05-16 16:11:33 -04:00
Jeff Mitchell 4c67a739b9 Merge branch 'master-oss' into cubbyhole-the-world 2016-05-16 12:14:40 -04:00
Jeff Mitchell 35ff423e09 Merge pull request #1420 from hashicorp/revert-1419-f-path-cleanup 
Revert "Remove a few assumptions regarding bash(1) being located in /bin."
 2016-05-15 15:22:28 -04:00
Jeff Mitchell 60975bf76e Revert "Remove a few assumptions regarding bash(1) being located in /bin." 2016-05-15 15:22:21 -04:00
Sean Chittenden f535e749f1 Merge pull request #1419 from hashicorp/f-path-cleanup 
Remove a few assumptions regarding bash(1) being located in /bin.  Rename `Makefile` to `GNUmakefile` inline with the same change made in Consul and Nomad.
 2016-05-15 11:52:59 -07:00
Sean Chittenden f91114fef5
Remove a few assumptions regarding bash(1) being located in /bin. 
Use sh(1) where appropriate.
 2016-05-15 11:41:14 -07:00
Sean Chittenden 792950e16c Merge pull request #1417 from hashicorp/b-pki-expire-ttl-unset 
Set entry's TTL before writing out the storage entry's config
 2016-05-15 10:02:03 -07:00
Sean Chittenden 7a4b31ce51
Speling police 2016-05-15 09:58:36 -07:00
Sean Chittenden b0bba6d271
Store clamped TTLs back in the role's config 2016-05-15 08:13:56 -07:00
vishalnayak ab86b60b19 changelog++ 2016-05-15 10:41:13 -04:00
Sean Chittenden af4e2feda7
When testing, increase the time we wait for the stepdown to occur. 
2s -> 5s, no functional change.
 2016-05-15 07:30:40 -07:00
Sean Chittenden 539475714d
Set entry's TTL before writing out the storage entry's config 2016-05-15 07:06:33 -07:00
Oren Shomron b8840ab9eb Support listing ldap group to policy mappings (Fixes #1270) 2016-05-14 20:00:40 -04:00
Vishal Nayak 53fc941761 Merge pull request #1300 from hashicorp/aws-auth-backend 
AWS EC2 instances authentication backend
 2016-05-14 19:42:03 -04:00
vishalnayak 6f65d9293a Fix framework rollback manager tests 2016-05-14 19:35:36 -04:00
vishalnayak 4122ed860b Rename 'role_name' to 'role' 2016-05-13 14:31:13 -04:00
Jeff Mitchell b850f876a7 Merge pull request #1407 from z00m1n/patch-1 
fix PostgreSQL sample code
 2016-05-12 17:07:48 -07:00
Jeff Mitchell 73fc616590 Merge pull request #1408 from cmclaughlin/patch-1 
Document configuring listener to use a CA cert
 2016-05-12 16:08:43 -07:00
cmclaughlin cdf715b94a Document configuring listener to use a CA cert 2016-05-12 15:34:47 -07:00
Steven Samuel Cole e3bb3a4efb fix PostgreSQL sample code 
The current sample configuration line fails with `Error initializing backend of type postgresql: failed to check for native upsert: pq: unsupported sslmode "disabled"; only "require" (default), "verify-full", "verify-ca", and "disable" supported`.
 2016-05-12 23:22:41 +02:00
vishalnayak 9147f99c43 Remove unused param from checkForValidChain 2016-05-12 15:07:10 -04:00
Jeff Mitchell 560e9c30a3 Merge branch 'master-oss' into cubbyhole-the-world 2016-05-12 14:59:12 -04:00
Jeff Mitchell 9cf43d9c50 changelog++ 2016-05-12 14:58:59 -04:00
Vishal Nayak 215118dbf6 Merge pull request #1404 from hashicorp/non-ca-crl-check 
Perform CRL checking for non-CA registered certs
 2016-05-12 14:50:59 -04:00
Sean Chittenden 99a5213f0b Merge pull request #1355 from hashicorp/f-vault-service 
Vault/Consul Service refinement
 2016-05-12 11:48:29 -07:00
vishalnayak 85d9523f98 Perform CRL checking for non-CA registered certs 2016-05-12 14:37:07 -04:00