7fe115fcf6
changelog++
2017-08-15 21:48:33 -04:00
fed9d8a2ab
changelog++
2017-08-15 21:28:58 -04:00
83cd8cd26a
Add the ability to use root credentials for AWS IAM authentication. ( #3181 )
...
Partial fix for #3179
2017-08-15 21:26:16 -04:00
f8922bf674
Update help output (spaces instead of tabs) ( #3178 )
2017-08-15 21:21:30 -04:00
89b81bcb4c
Oracle plugin docs ( #3131 )
...
* Add oracle database docs
* Add oracle database docs
* Fix commas in json output
* Update oracle.html.md
2017-08-15 17:24:01 -07:00
c1e6e0bdf2
Use SSHPASS envvar instead of -p for sshpass ( #3177 )
...
From the sshpass manpage:
> The -p option should be considered the least secure of all of sshpass's options. All system users can see the password in the command line with a simple "ps" command. Sshpass makes a minimal attempt to hide the password, but such attempts are doomed to create race conditions without actually solving the problem. Users of sshpass are encouraged to use one of the other password passing techniques, which are all more secure.
This PR changes the sshpass behavior to execute a subprocess with the
SSHPASS envvar (which is generally regarded as more secure) than using
the -p option.
2017-08-15 19:43:39 -04:00
48bf1d6edc
Add core sealing to test cluster shutdown
2017-08-15 17:06:38 -04:00
e30b1057df
changelog++
2017-08-15 16:45:02 -04:00
c864c0bad5
Return 500 if existence check fails, not 400 ( #3173 )
...
Fixes #3162
2017-08-15 16:44:16 -04:00
aa4e4b90ff
changelog++
2017-08-15 16:17:42 -04:00
340fe4e609
Add permitted dns domains to pki ( #3164 )
2017-08-15 16:10:36 -04:00
64f9b9f43b
Bump go-plugin version
2017-08-15 16:06:56 -04:00
f154a244c8
changelog++
2017-08-15 14:01:42 -04:00
e4eb6e9020
Make PKI root generation idempotent-ish and add delete endpoint. ( #3165 )
2017-08-15 14:00:40 -04:00
8902240dfa
Added persona to logical auth
2017-08-15 13:55:58 -04:00
b023d46cb8
Direct plugin logs through vault's logger ( #3142 )
...
* Direct plugin logs through vault's logger
* Pass in a logger in testConfig
2017-08-15 10:16:48 -04:00
bc7d77c83f
Update index.html.md
...
Updated replication docs for DR
2017-08-14 19:02:02 -07:00
d25bc60feb
Update libraries ( #3160 )
...
* Remove vault-java which has better alternatives.
* Add ansible-vault, a zero dependency
[lookup-plugin](http://docs.ansible.com/ansible/latest/playbooks_lookups.html ) for ansible
2017-08-14 20:28:11 -04:00
96ef7304db
changelog++
2017-08-14 20:16:36 -04:00
a133286609
Switch policies in AppRole to TypeCommaStringSlice ( #3163 )
2017-08-14 20:15:51 -04:00
035d37cd36
Fix hanadb link
2017-08-14 13:04:26 -04:00
3f76dcbb5d
changelog++
2017-08-14 12:44:44 -04:00
cca327feae
Only use specified HTTP client for AWS creds if one is passed in. ( #3161 )
...
Probably fixes #3159
2017-08-14 12:43:11 -04:00
09d0a894d7
docs: Fix the default value for 'generate_signing_key'
2017-08-14 12:39:11 -04:00
07160ed814
Add missing link to sidebar menu ( #3153 )
...
* Add missing link to sidebar menu
* Add missing link to sidebar menu
2017-08-14 12:33:47 -04:00
ce73c26b0d
Add note about turning off core dumps into production hardening guide
2017-08-14 12:29:54 -04:00
ea2d4c7d55
add scheme to the redirect_addr example
2017-08-14 10:59:44 -04:00
914fab79ce
add scheme to the redirect_addr example
2017-08-14 10:59:44 -04:00
8ee362744b
Break SSH types into their own pages ( #3157 )
...
@jefferai and I discussed this on Friday. With three fully-documented
SSH backends, the page is lengthy, ungreppable, and intimidating. This
commit separates the SSH backends into their own pages with as little
text changes as possible.
2017-08-14 10:49:41 -04:00
0274a0f639
Rename database plugins for SEO ( #3156 )
...
When we "nest" like this, it's important to use a common suffix,
"Database Secret Backend" in this case, so that the SEO minions can
properly group search results for end users.
2017-08-14 10:46:39 -04:00
1b6991c8f3
Removed unused parameter from docs ( #3152 )
...
According to #3116 , it seems like this parameter isn't used. I couldn't trigger any differences by playing around with transit signing function, and could not find anything in the source code that actually parses this param. Presumably, it is unused?
2017-08-11 20:57:06 -04:00
75bc43e961
Update github comment
2017-08-11 17:03:18 -04:00
d477b9455e
Fix broken url in replication performance docs
2017-08-11 16:03:05 -04:00
a023ab5152
Fix MySQL legacy username regression ( #3141 )
...
* Fix the mysql legacy username length
* Remove boolean parameter
* Add a MySQL 5.6 container to test the legacy MySQL plugin against
* Add database plugins to the make file
* Fix credsutil test
2017-08-10 18:28:18 -07:00
d931a2fa85
Remove references to VSI ( #3143 )
...
Andy approved
2017-08-10 20:47:59 -04:00
07dc10cdc8
Add TLS config to skeleton plugin ( #3137 )
2017-08-09 11:41:17 -07:00
c88db7b185
docs: Add API section for MFA docs
2017-08-09 13:26:29 -04:00
0a0e697e05
docs: fix broken link
2017-08-09 13:17:56 -04:00
254c1b6ae0
docs: Added identity concepts
2017-08-09 13:08:05 -04:00
9844475b64
docs: Add X-Vault-MFA to the list of env vars
2017-08-09 11:31:30 -04:00
e3e5be4617
API Docs updates ( #3135 )
2017-08-09 11:22:19 -04:00
d8a3bccb43
Fix cassandra doc link
2017-08-09 10:32:03 -04:00
f80addc563
docs: Fix errors on plugin backends guide ( #3134 )
...
* docs: Fix path on sample command in plugin backend guide
* Fix grammar on intro
* Fix ref links in plugin guide
2017-08-09 10:28:13 -04:00
6309ae4d1a
Cut version 0.8.0
2017-08-09 05:12:12 -04:00
9295a440f9
Prep for release
2017-08-09 05:05:21 -04:00
6d6e84f804
docs: MFA usage details ( #3133 )
2017-08-08 23:48:31 -04:00
5cb3a79568
Add an extra sentence to the github warning
2017-08-08 21:10:15 -04:00
6092538511
splitting cache into transactional and non-transactional cache structs ( #3132 )
2017-08-08 20:47:14 -04:00
9410ec2c6d
docs: API docs for TOTP, Okta and Duo MFA ( #3129 )
...
* docs: API docs for TOTP, Okta and Duo MFA
* docs: List types in the MFA main page
2017-08-08 20:20:37 -04:00
2e80e6488f
Bump database plugin protocol version
2017-08-08 17:01:38 -07:00
Jeff Mitchell