Commit Graph

12736 Commits

Author SHA1 Message Date
Calvin Leung Huang 95c5f60055
docs/ssh: update algorithm_signer param after #9824 (#10126) 2020-10-09 15:42:11 -07:00
Calvin Leung Huang 46396173eb
changelog++ 2020-10-09 15:07:26 -07:00
Lauren Voswinkel 0b7c6d2f71
Update couchbase plugin to use v5 dbplugin (#10124)
* Update couchbase plugin to use v5 dbplugin
2020-10-09 13:47:13 -07:00
Michael Golowka 5705133c2b
Fix checksum for vault-plugin-secrets-ad (#10125) 2020-10-09 13:53:27 -06:00
Jason O'Donnell a21868b1ad
changlelog++ 2020-10-09 14:29:28 -04:00
Jason O'Donnell abcac87687
secrets/ad: update dependency (#10121) 2020-10-09 14:07:04 -04:00
Lauren Voswinkel 55761c1d43
Migrate MySQL db to v5 database engine (#10110)
* Migrate MySQL db to v5 database engine
2020-10-09 10:32:38 -07:00
Jimmy Merritello ec133d98a2
Add new HashiStackMenu (#10105) 2020-10-09 12:15:38 -04:00
Chelsea Shaw fa1cdf66a7
Ui/pricing metric sparkle (#10119)
* Update pricing-metrics-dates component to show error if outside configured retainment period. With tests

* Add capability checks for metrics config
2020-10-09 10:14:55 -05:00
Vishal Nayak 1f4be33dd0 changelog++ 2020-10-09 08:41:49 -04:00
Jason O'Donnell cf9a7373bb
Update ad plugin to v0.6.7 (#10116) 2020-10-08 17:00:45 -04:00
Jason O'Donnell 6cf7da3153
docker-dev: add go version as build arg (#10117) 2020-10-08 14:30:31 -04:00
James Connor 86e79f6f26
lease_renewable false on STS AWS credentials (#10115)
See #1804
2020-10-08 10:25:01 -07:00
Peter Souter c48ec9cfc3
Adding note about commands that are root only (#10098)
* We don’t specifically note anywhere that these 
have to be run from root, so makes sense to add
2020-10-08 09:46:43 -07:00
Martin Baillie 09aa3dfa6c
Add reference to community GitHub secrets plugin (#10111) 2020-10-08 09:45:42 -07:00
Chelsea Shaw 000541f178
Ui/pricing metric config (#10102)
* Fix routing on metrics

* Show current metrics config

* Ability to edit metrics config
2020-10-08 10:23:59 -05:00
Brian Kassouf cb37fda0a7
Expiration: Fix lease counting logic (#10106) 2020-10-07 17:27:45 -07:00
Michael Golowka c5472ca697
DBPW - Update PostgreSQL to adhere to v5 Database interface (#10061) 2020-10-07 12:58:11 -06:00
Josh Black 088c6c7364
Add API docs for sys/monitor (#9968) 2020-10-07 11:53:07 -07:00
Ivan Lemeshev c84be1c874
Fix panic in RekeyVerifyRestart (#9930) (#10099) 2020-10-07 11:06:17 -07:00
Angel Garbarino 9d7b042fd3
Mask LDAP bindpass while typing (#10087)
* use input field type password when maskWhileTyping is passed which returns true when it is bindpass

* setup testing for type password and unmasking

* add back original spacing

* remove is
2020-10-07 10:27:41 -06:00
Scott Miller 4bc458c1ee
Add a helper function for safely grabbing a keyEntry by version (#10080)
* Add a helper function for safely grabbing a keyEntry by version

* Return by value
2020-10-07 08:21:31 -05:00
Ivan Lemeshev 8a2842b467
Fix panic in handleAuditNonLogical if vault is sealed (#9310) (#10103) 2020-10-07 08:30:36 -04:00
Sam Salisbury 8f8c4b32c5
Packagespec0.1.5/master (#10090)
* packagespec upgrade -version 0.1.5

* remove meta.POST_PROCESSORS - no longer needed

* make ci-config: remove old prereq
2020-10-07 09:35:26 +01:00
Josh Black 53e5531634
Add README.md to api (#10088) 2020-10-06 14:27:59 -07:00
Scott Miller dfec27df87
Revert unnecessary changes to api/go.mod (#10097)
* restore api's go.mod

* sdk too

* root level go mod vendor
2020-10-06 14:25:46 -05:00
Josh Black 3e278b33dc
Clarify docs around audit non-hmac request and response keys (#10018) 2020-10-06 10:43:32 -07:00
Calvin Leung Huang 7c3a08af8a
changelog++ 2020-10-05 14:40:40 -07:00
Jonas-Taha El Sesiy 9b599c8162
Migrate to azure-storage-blob-go (#9577)
The azure sdk for go is maintenance-only for storage, see https://github.com/Azure/azure-sdk-for-go/tree/master/storage\#azure-storage-sdk-for-go-preview
Migrate to new azure-storage-blob-go SDK
Minor test improvements

Fix #9661
2020-10-05 14:37:13 -07:00
Chelsea Shaw 2d244f6817
Ui/pricing metrics params (#10083)
metrics route takes start and end params and passes to the date display field, as well as the route's API call
2020-10-05 16:34:52 -05:00
Hridoy Roy 27d68e7df2
Flaky Test Fix: TestSink [VAULT-720] (#10086)
* fixed

* test sink fix

* remove print statements used for debugging

* remove print statements used for debugging

Co-authored-by: HridoyRoy <hridoyroy@Hridoys-MacBook-Pro.local>
Co-authored-by: HridoyRoy <hridoyroy@Hridoys-MBP.hitronhub.home>
2020-10-05 10:29:08 -07:00
Angel Garbarino a161fc7047
Test Fix: test for default TTL instead of date timestamp (#10070)
* fix test to check not for date but for ttl default of 1800s instead to avoid 1 second off issue

* change const name

* add another test to check when set specific ttl
2020-10-05 10:55:38 -06:00
Michel Vocks dc5a0da770
Pull latest raft updates (#10055)
* Implement raft peers metric

* Remove old peers metric

* Update vault raft dependency

* Add peer_id docs
2020-10-05 16:36:48 +02:00
Tom Proctor f35835bc25
Remove duplicate "ad" schema log 2020-10-05 15:25:40 +01:00
Michael Golowka 65a5e866e5
DBPW - Update MongoDB to adhere to v5 Database interface (#10053) 2020-10-02 15:35:11 -06:00
Meggie da82b2096d
Adding an UG note on primary_cluster_addr behavior (#10071) 2020-10-02 13:25:09 -04:00
Scott Miller b513af3851
Expose generic versions of KDF and symmetric crypto (#10076)
* Support salt in DeriveKey

* Revert "Support salt in DeriveKey"

This reverts commit b295ae42673308a2d66d66b53527c6f9aba92ac9.

* Refactor out key derivation, symmetric encryption, and symmetric decryption into generic functions

* comments

* comments

* go mod vendor

* bump both go.mods

* This one too

* bump

* bump

* bump

* Make the lesser used params of symmetric ops a struct

* go fmt

* Call GetKey instead of DeriveKey

* Address feedback

* Wrong rv

* Rename calls

* Assign the nonce field

* trivial change

* Check nonce len instead

* go mod vendor
2020-10-01 21:04:36 -05:00
Troy Fluegge 2b9b41115a
Update index.mdx (#10064)
Reworded disable_mlock to remove confusion regarding what is acceptable for production deployments.  Disabling mlock is alright for production given the additional security recommendations are implemented.  Disabling mlock is also recommended for integrated storage
2020-10-01 15:31:03 -07:00
Lauren Voswinkel 4dfa7bdd39
Changelog++ 2020-10-01 13:39:59 -07:00
Chelsea Shaw 27f6988c3f
Ui/pricing metrics page setup (#10049)
* Create model and adapter for metrics/activity

* Query activity and return fake data on adapterError

* Add stub of pricing metrics cards and search form elements to metrics template

* Metrics page has pricing metrics rather than all-time tokens and requests

* update metrics config model

* Add metrics-config route and page

* Remove metrics/http-requests route and template

* remove log

* Add alert banner for when tracking disabled, and add result dates

* Small edits
2020-10-01 14:37:33 -05:00
Aleksandr Bezobchuk a3cfa7c447
Merge PR #10059: Port OSS changes from #1497 2020-10-01 15:15:20 -04:00
Chelsea Shaw 20cc59ea25
Ui/transform handle delete (#10035)
* Add hasDataChanges hook on persist for delete and save

* Reverse order of disconnecting transformations then deleting role

* Update get functions to be in line with impending ember upgrade
2020-10-01 10:27:45 -05:00
Michael Golowka fc0ed96066
DBPW - Revert AutoMTLS (#10065) 2020-09-30 17:08:37 -06:00
Hridoy Roy 649cef00f8
updated changelog to reflect Enterprise fix [VAULT-507] (#10056)
* updated changelog

* fix changelog

Co-authored-by: HridoyRoy <hridoyroy@Hridoys-MacBook-Pro.local>
Co-authored-by: HridoyRoy <hridoyroy@Hridoys-MBP.hitronhub.home>
2020-09-30 14:39:43 -07:00
Calvin Leung Huang d903095b3b
changelog++ 2020-09-29 18:10:44 -07:00
Calvin Leung Huang 90a3f32771
agent: return a non-zero exit code on error (#9670)
* agent: return a non-zero exit code on error

* agent/template: always return on template server error, add case for error_on_missing_key

* agent: fix tests by updating Run params to use an errCh

* agent/template: add permission denied test case, clean up test var

* agent: use unbuffered errCh, emit fatal errors directly to the UI output

* agent: use oklog's run.Group to schedule subsystem runners (#9761)

* agent: use oklog's run.Group to schedule subsystem runners

* agent: clean up unused DoneCh, clean up agent's main Run func

* agent/template: use ts.stopped.CAS to atomically swap value

* fix tests

* fix tests

* agent/template: add timeout on TestRunServer

* agent: output error via logs and return a generic error on non-zero exit

* fix TestAgent_ExitAfterAuth

* agent/template: do not restart ct runner on new incoming token if exit_after_auth is set to true

* agent: drain ah.OutputCh after sink exits to avoid blocking on the channel

* use context.WithTimeout, expand comments around ordering of defer cancel()
2020-09-29 18:03:09 -07:00
Michael Golowka 3a03be14e1
Make username generation in SQLCredentialsProducer available without an instance (#10050) 2020-09-29 16:54:34 -06:00
Andy Assareh ab7cd4f8db
corrected typo in "certificate" (#9916) 2020-09-28 17:39:01 -07:00
Andy Assareh 818120b401
corrected a missing noun (#9917) 2020-09-28 17:38:39 -07:00
aphorise 101855f365
UI - Added success message to core for the copy-buttn action in masked-inputs view. Resolves: #7321 (#9808) 2020-09-28 16:52:06 -07:00