mgritter
be2f69bc4a
Check nil parameter value when processing an ACL.
2019-04-26 15:57:00 -07:00
Chris Hoffman
25cd6da6a4
refactoring to unit test transit seal ( #6605 )
2019-04-23 15:13:56 -04:00
Jeff Mitchell
a4285a487d
Sync plugin reload file
2019-04-23 10:22:56 -04:00
ncabatoff
06574da57a
Merge multiple functions for creating consul containers into one. ( #6612 )
...
Merge both functions for creating mongodb containers into one.
Add retries to docker container cleanups.
Require $VAULT_ACC be set to enable AWS tests.
2019-04-22 12:26:10 -04:00
Jeff Mitchell
9a7eb54a68
Merge branch '1.1.2' into master-oss
2019-04-18 18:49:49 -04:00
Brian Kassouf
8afbb0ba46
Add a get handler function ( #6603 )
2019-04-17 14:21:56 -07:00
Brian Kassouf
43783a5dca
Move cluster logic out of vault package ( #6601 )
...
* Move cluster logic out of vault package
* Dedup heartbeat and fix tests
* Fix test
2019-04-17 13:50:31 -07:00
Jeff Mitchell
c22075fa81
Add unit test for KV issue 31 ( #6591 )
2019-04-16 09:53:24 -07:00
Jeff Mitchell
213b9fd1cf
Update to api 1.0.1 and sdk 0.1.8
2019-04-15 14:10:07 -04:00
Jeff Mitchell
9ebc57581d
Switch to go modules ( #6585 )
...
* Switch to go modules
* Make fmt
2019-04-13 03:44:06 -04:00
Jeff Mitchell
1b5155080b
Update protobufs, sdk changes
2019-04-12 23:13:14 -04:00
Becca Petrin
6ded269700
Merge pull request #6268 from hashicorp/6234-aws-region
...
Add region to CLI for generating AWS login data
2019-04-12 16:15:38 -07:00
Jeff Mitchell
80c303ac83
Move ldaputil and tlsutil over to sdk
2019-04-12 18:26:54 -04:00
Jeff Mitchell
371db36ede
Move useragent to sdk
2019-04-12 18:17:49 -04:00
Jeff Mitchell
8d6ce1ffb5
Move policyutil to sdk
2019-04-12 18:08:46 -04:00
Jeff Mitchell
8bcb533a1b
Create sdk/ and api/ submodules ( #6583 )
2019-04-12 17:54:35 -04:00
Becca Petrin
f20772310b
Merge branch 'opensource-master' into 6234-aws-region
2019-04-12 11:13:17 -07:00
Jeff Mitchell
3ec1e79b6a
Fix test code breakage
2019-04-12 11:37:34 -04:00
ncabatoff
521e93c32b
Save metrics to barrier without going through c.systemBarrierView ( #884 )
...
* Don't bother trying to save metrics when we don't have a barrier. Use stateLock.
* Use c.barrier instead of c.systemBarrierView, thus we don't need locking
and don't need to worry about race with mount setup.
* Remove unneccessary lock.
2019-04-11 12:37:38 -04:00
Jeff Mitchell
9f148c499e
Fix test break
2019-04-11 11:18:32 -04:00
Jeff Mitchell
4aa4a0665f
Sync over
2019-04-11 11:12:37 -04:00
Jeff Mitchell
aa6fafced9
Fix hasMountPath for segment wildcard mounts; introduce priority order ( #6532 )
...
* Add prioritization when multiple segment/glob rules can match.
* Disallow ambiguous "+*" in policy paths.
2019-04-10 17:46:17 -04:00
Vishal Nayak
0df2d14961
Properly invalidate group alias in a secondary ( #6564 )
2019-04-10 16:14:31 -04:00
Vishal Nayak
7ab753b569
Use NS context when loading entities and groups ( #6563 )
...
* Use NS context when loading entities and groups
* update context while group loading as well
* Address review feedback
2019-04-10 15:05:57 -04:00
Brian Kassouf
f5be7c8cea
Fix perf standby elections when the new active node was also the previous active node ( #6561 )
2019-04-10 10:09:36 -07:00
Brian Kassouf
76969aa801
Fix deadlock on the mounts & auth locks ( #6560 )
...
* Fix deadlock on the mountsLock
* Fix deadlock on authLock too
2019-04-09 19:20:06 -07:00
Jeff Mitchell
12285f5ed0
Sync over
2019-04-08 14:57:14 -04:00
Jeff Mitchell
30209cdd35
Update token path with / at end to ensure it's the token store
2019-04-08 14:25:29 -04:00
Jeff Mitchell
1d982c234f
Fix some more test failures and recursive locking ( #6549 )
2019-04-08 13:40:54 -04:00
Jeff Mitchell
9f0a6edfcb
Remove some instances of potential recursive locking ( #6548 )
2019-04-08 12:45:28 -04:00
Vishal Nayak
f4876b744c
Fix handling member group IDs ( #6527 )
...
* Process member_group_ids only if supplied
2019-04-05 09:12:39 -04:00
Jeff Mitchell
eec3f9afb2
Handle JWT checks with namespaced service tokens ( #6536 )
...
Some checks would fail because we considered a token with two dots a
JWT, but service tokens in namespaces also fit this bill.
2019-04-04 17:13:09 -04:00
ncabatoff
b08963779c
Apply the bits from ent pr 852 that are relevant to OSS. ( #6528 )
2019-04-04 13:02:44 -04:00
Calvin Leung Huang
ee46fd4362
core: port over CG and perf standby handling bits ( #6530 )
2019-04-03 14:16:49 -07:00
Becca Petrin
d6f489cca7
strip import whitespace
2019-04-03 13:43:54 -07:00
Becca Petrin
ed03e8f04d
add comment on region parsing
2019-04-03 11:58:20 -07:00
Becca Petrin
339cfcaaf8
merge master
2019-04-01 13:52:44 -07:00
Jim Kalafut
265e61b993
Add OpenAPI support for query parameters ( #6490 )
...
Also, fix handling of required properties in request body.
2019-03-28 14:40:56 -07:00
Brian Kassouf
f50ff52a8b
Add metrics to seal methods ( #6478 )
2019-03-26 10:32:19 -07:00
Jeff Mitchell
775f547e4e
Sync over
2019-03-25 14:18:43 -04:00
Jeff Mitchell
6797e21f54
Migrate from SermoDigital go Square JOSE ( #6445 )
2019-03-20 14:54:03 -04:00
T.K
453f1ac109
changed misspelled english words ( #6432 )
2019-03-19 09:32:45 -04:00
Brian Kassouf
2af9d9de98
Fix a locking issue in the Rollback manager ( #6426 )
...
* Fix a locking issue in the Rollback manager
* Update rollback.go
* Update rollback.go
* move state creation
* Update vault/rollback.go
Co-Authored-By: briankassouf <briankassouf@users.noreply.github.com>
* Simplify logic by canceling the lock grab
* Use context instead of a chan
* Update vault/rollback.go
2019-03-18 11:12:48 -07:00
Jeff Mitchell
9193792773
Sync over
2019-03-18 09:33:01 -04:00
Calvin Leung Huang
7a80fd0a81
add short sleep between revocation and lookup ( #6425 )
2019-03-15 18:24:53 -04:00
Michel Vocks
f4b0bd484a
Added upstream changes from enterprise to OSS ( #6419 )
2019-03-15 14:25:05 +01:00
Calvin Leung Huang
a71adbc2ce
sys: do not show filtered mounts on internal/ui/mounts ( #6412 )
2019-03-14 11:43:44 -07:00
Calvin Leung Huang
70108668a9
testing: allow logger and audit backends to be set in TestCoreWithSealAndUI ( #6388 )
2019-03-08 13:46:24 -08:00
Chris Hoffman
d9c54877ba
Fixing transit seal tests ( #6342 )
...
* fixing dockertest to run on travis
* try a repo local directory
* precreate the directory
* strip extraneous comment
* check directory was created
* try to print container logs
* try writing out client logs
* one last try
* Attempt to fix test
* convert to insecure tls
* strip test-temp
2019-03-07 11:23:30 -08:00
Jeff Mitchell
c4001cc40d
This moves api_test package tests into vault/external_tests
...
This prevents projects importing Vault's API from then also importing
the rest of Vault.
2019-03-06 11:20:42 -05:00