e0c2b37c2a
Add commenting to singletonMountTables
2017-05-08 13:39:18 -04:00
f50d345fa3
Fix imports.
...
Closes #2688
2017-05-08 10:23:29 -04:00
726bd6f379
Don't load a required mount if in secondary mode, let sync invalidate do that
2017-05-05 19:40:26 -04:00
3aafb3270c
Move singleton mount fetching function to mount.go and fix tests
2017-05-05 17:20:30 -04:00
b53331d345
Add token to singleton mounts
2017-05-05 16:45:48 -04:00
6f6f242061
Add logic to skip initialization in some cases and some invalidation logic
2017-05-05 15:01:52 -04:00
fa201f2505
auth/token/tidy log level update
2017-05-05 11:16:13 -04:00
55ef4f2566
Merge branch 'master-oss' into sys-tidy-leases
2017-05-05 10:53:41 -04:00
b482043de1
Update debugging around tidy
2017-05-05 10:48:12 -04:00
91e790867f
Address feedback
2017-05-05 10:26:40 -04:00
2d6dfbf147
Don't store the plugin directory prepended command in the barrier, prepend on get
2017-05-04 12:36:06 -07:00
5ee0d696d4
Merge remote-tracking branch 'oss/master' into database-refactor
2017-05-04 10:45:18 -07:00
b568ea751b
Move client token check in exp register to top
2017-05-04 12:45:57 -04:00
abd63096f8
Update comments
2017-05-04 12:44:31 -04:00
1a02f9be11
Fix up the tests
2017-05-04 12:41:15 -04:00
5683430cb7
Update Tidy function comment
2017-05-04 12:11:00 -04:00
d74b1b284a
Update commenting
2017-05-04 11:54:57 -04:00
9a91700263
Move tidy-leases to leases/tidy
2017-05-04 09:40:11 -04:00
f8295a301d
Merge branch 'master-oss' into sys-tidy-leases
2017-05-04 09:37:52 -04:00
3d9cf89ad6
Add the ability to view and list of leases metadata ( #2650 )
2017-05-03 22:03:42 -04:00
7250b3d01e
Fix comment typo
2017-05-03 20:25:55 -04:00
b7128f53a8
Add sys/leases/lookup and sys/leases/renew to the default policy
2017-05-03 20:22:16 -04:00
7f3891c734
Fix substitution of index/child in delete call
2017-05-03 15:09:13 -04:00
99884a8f13
Merge remote-tracking branch 'oss/master' into sys-tidy-leases
2017-05-03 15:02:42 -04:00
3b95e751c0
Add more cleanup if a lease fails to register and revoke tokens if registerauth fails
2017-05-03 14:29:57 -04:00
bb6b5f7aa6
Add taint flag for looking up by accessor
2017-05-03 13:08:50 -04:00
a1a0c2950f
logging updates
2017-05-03 12:58:10 -04:00
6aa7f9b7c9
Added logs when deletion fails so we can rely on server logs
2017-05-03 12:47:05 -04:00
bc5d5b7319
consistent logging
2017-05-03 12:45:22 -04:00
596ad2c8f7
Adhere to tainted status in salted accessor lookup
2017-05-03 12:36:10 -04:00
5f18b1605a
Two things:
...
1) Ensure that if we fail to generate a lease for a secret we attempt to revoke it
2) Ensure that any lease that is registered should never have a blank token
In theory, number 2 will let us a) find places where this *is* the case, and b) if errors are encountered when revoking tokens due to a blank client token, it suggests that the client token values are being stripped somewhere along the way, which is also instructive.
2017-05-03 12:17:09 -04:00
0553f7a8d1
change some logging output
2017-05-03 12:14:58 -04:00
c9bd54ad65
Less scary debugging
2017-05-03 11:15:59 -04:00
dd898ed2e1
Added summary logs to help better understand the consequence
2017-05-03 10:54:07 -04:00
9f682eb9cd
Test to check that leases with valid tokens are not being cleaned up
2017-05-02 18:12:03 -04:00
850cda7861
Added test to check the atomicity of the lease tidy operation
2017-05-02 18:06:59 -04:00
875658531b
Do not duplicate log lines for invalid leases
2017-05-02 17:56:15 -04:00
f644c34c5b
Remove unused TestCoreUnsealedWithListener function
2017-05-02 14:52:48 -07:00
5e0c03415b
Don't need to explictly set redirectAddrs
2017-05-02 14:44:14 -07:00
29d9b831d3
Update the api for serving plugins and provide a utility to pass TLS data for commuinicating with the vault process
2017-05-02 14:40:11 -07:00
403fd62c61
Check if multiple leases with same invalid token is getting cleaned up
2017-05-02 17:15:26 -04:00
5f70576715
Added steps to check if invalid token is properly cleaned up
2017-05-02 17:11:35 -04:00
668595b902
Added a test for tidying of empty token
2017-05-02 16:54:03 -04:00
68635e8a1c
Skip checking the validity of an empty client token
2017-05-02 16:53:41 -04:00
537342f038
Fixing printf (and similar) issues ( #2666 )
2017-05-01 23:34:10 -04:00
72d05cd8dd
Refactor locking code in lease tidy; add ending debug statements
2017-04-27 16:22:19 -04:00
d8e91ef616
refactor lock handling in token tidy function
2017-04-27 13:48:29 -04:00
f9c1426ac8
Use an atomic lock for tidy operation in token store
2017-04-27 11:41:33 -04:00
ac8aae36fe
Distinguish valid and invalid tokens using bool value in cache
2017-04-27 11:31:42 -04:00
58967c0bbd
Merge branch 'oss' into sys-tidy-leases
2017-04-27 11:23:48 -04:00
Jeff Mitchell