luxolus/open-vault
2
0
Fork 0
Code Issues 1 Pull requests Releases Activity
13681 commits 1 branch 0 tags 214 MiB
Commit graph

13681 commits

This branch
This branch
All branches
Author SHA1 Message Date
Thor db9edf519b
cockroachdb: Fix either incorrect or outdated info (#11512) 
The documentation stated that Vault would not create the table
if it doesn't exist. But Vault does attempt to create the table if
it doesn't exist.

Ref:
https://github.com/hashicorp/vault/blob/master/physical/cockroachdb/cockroachdb.go#L84
 2021-07-09 14:30:21 -07:00
Jim Kalafut 7986c2c1f8
Update plugin dependencies for 1.8 (#12036) 2021-07-09 13:36:52 -07:00
Pratyoy Mukhopadhyay 9b5e89bd34
[VAULT-2776] Add prefix_filter option to Vault (#12025) 
* [VAULT-2776] Add prefix_filter support to vault

* [VAULT-2776] Add filter_default config, update docs

* [VAULT-2776] Add changelog file

* [VAULT-2776] Update telemetry tests and error handling

* [VAULT-2776] Add test fixtures, update test

* [VAULT-2776] Update gitignore hcl filter
 2021-07-09 14:49:53 -05:00
Chelsea Shaw 326590f42e
Exit test process if vault fails to initialize (#11998) 2021-07-09 14:30:44 -05:00
Nick Cabatoff a3ac49aa05
VAULT-2809: Tweak creation of vault.db file (#12034) 2021-07-09 14:45:50 -04:00
Loann Le 43265d6626
changed name from faqs to faq (#12033) 2021-07-09 09:13:49 -07:00
Nick Cabatoff 518944c599
Make the list and kv list commands work with wrapping, e.g. for controlgroups (#12031) 2021-07-09 12:08:58 -04:00
Chris Capurso 349378454a
[VAULT-1836] Support kv-v1 generic mounts for vault.kv.secret.count metric (#12020) 
* [VAULT-1836] Support kv-v1 generic mounts for vault.kv.secret.count metric

* [VAULT-1836] Add changelog entry
 2021-07-09 11:05:05 -04:00
Austin Gebauer f54338977d
secrets/gcp: update to v0.10.1 for static accounts (#12023) 2021-07-08 13:53:45 -07:00
Jason O'Donnell af51033214
secrets/openldap: add schema config to rotate-root (#12019) 
* update go mod & go mod tidy

* Changelog
 2021-07-08 13:53:17 -04:00
Vishal Nayak eecb39a57f
OSS parts of Autopilot in DR secondaries (#12014) 2021-07-08 12:30:01 -04:00
MilenaHC 3c3b6529fd
Redshift - Add username customization (#12016) 
* username customization for redshift

* adding changelog and updating api-docs
 2021-07-08 10:29:12 -05:00
claire bontempo 72e3d29abc
Truncate Secret Engine Description Text (#11995) 
Co-authored-by: hashishaw <cshaw@hashicorp.com>
 2021-07-08 08:21:10 -07:00
Danny Hermes a4bb9baf48
Typo fix: period rotation -> periodic rotation (#12011) 2021-07-08 10:45:49 -04:00
Lars Lehtonen 0196f43cbe
builtin/logical/pki: fix dropped test errors (#12013) 2021-07-08 10:14:38 -04:00
claire bontempo 08d117ae5b
Adds transform secrets engine to feature (#12003) 
* adds transform secrets engine to features list
 2021-07-07 16:14:54 -07:00
Angel Garbarino c56069990a
UI KV validation fix (#12010) 
* fix validation

* clean up
 2021-07-07 13:48:32 -06:00
Pratyoy Mukhopadhyay adbaad17db
[VAULT-708] Zero out request counter on preSeal (#11970) 
* [VAULT-708] Zero out request counter on preSeal

* [VAULT-708] Added changelog entry

* [VAULT-708] Add comment clarifying request counter zeroing
 2021-07-07 14:03:39 -05:00
Josh Black 3e8d8dda6b
Update vault-plugin-secrets-kv to 0.9.0 (#12007) 2021-07-07 11:48:00 -07:00
hghaf099 fedc31e905
Diagnose warns if HTTPS is not used for ha-storage-tls-consul [VAULT-2773] (#11967) 
* Diagnose warns if HTTPS is not used for ha-storage-tls-consul

* Skipping TLS verification if https is not used in ha storage tls consul

* Adding diagnose skip message for consul service registration
 2021-07-07 14:35:25 -04:00
claire bontempo 9df804e8d7
updates transit icons to keys (#12000) 2021-07-07 11:26:28 -07:00
Angel Garbarino 5fe59a685b
Reverting fix on KV 2 for duplicate paths (#12008) 
* revert changes

* changelog

* add test coverage for max versions
 2021-07-07 11:50:00 -06:00
Jason O'Donnell 0bc339a2f8
docs: add SSL connection example to oracle (#12006) 
* docs: add SSL connection example to oracle

* Fix link

* Add quotes to path
 2021-07-07 12:47:49 -04:00
Nick Cabatoff e49f125fe5
Return a more meaningful error when trying to use a partially-replicated token. (#11993) 2021-07-07 08:43:58 -04:00
Pratyoy Mukhopadhyay a8b62bd93e
[VAULT-1981] Add OSS changes (#11999) 2021-07-06 17:12:24 -05:00
swayne275 6664846a65
Vault-2713: Retry Irrevocable Lease Revocation Periodically (#11977) 
* prototype function to retry irrevocable lease revocation, clean up comment

* setup irrevocable lease revoke retry on expiration manager creation

* reduce expiration lag to 1 hour, use core context and timeout on retry attempts

* add lease namespace to revocation call

* start irrevocable revocation attempts in setupExpiration

* grab reference to channel to avoid race test failures
 2021-07-06 15:05:04 -06:00
MilenaHC 4430a11bc5
Update SnowflakeDB plugin to v0.2.0 (#11997) 
* update snowflake database plugin to v0.2.0

* add changelog

* update api-docs
 2021-07-06 13:23:03 -05:00
Jason O'Donnell 5a3bf9b506
docs: fix link rendering for Oracle (#11994) 
* docs: fix link rendering for Oracle

* Fix render
 2021-07-06 13:25:36 -04:00
Nick Cabatoff a2dcb131ee
vault delete should allow the same output options as vault write,… (#11992) 
* `vault delete` and `vault kv delete` should allow the same output options as `vault write`, as delete operations can similarly return data.  This is needed if you want to use control groups with deletion.
 2021-07-06 10:36:07 -04:00
John-Michael Faircloth 1da8bb0a25
MongoDB Atlas: Add username customization docs (#11943) 
* MongoDB Atlas: Add username customization docs

* add changelog

* remove changelog; it was added to the relevant go.mod update PR
 2021-07-06 08:24:23 -05:00
John-Michael Faircloth aa6afd50f6
Update mongodb atlas plugin version (#11956) 
* Update mongodb atlas plugin version

* go.mod was missing mongodbatlas plugin

* add changelog

* update build-go-dev circle ci job GOPROXY

* Revert "update build-go-dev circle ci job GOPROXY"

This reverts commit 0e6f339c779dac65ecb036735199f72d3d9e6a4a.

* ci: more complete go mod cache

* ci: doc use of go list ./... to populate mod cache

Co-authored-by: Sam Salisbury <samsalisbury@gmail.com>
 2021-07-06 08:24:10 -05:00
Lars Lehtonen 159272db7f
builtin/credential/approle: fix dropped test errors (#11990) 2021-07-05 11:00:12 -04:00
Sam Salisbury 8201b42651
fix vault version string injection (#11981) 
- Now we are not vendoring, the path needed to reflect that.
 2021-07-05 15:10:41 +01:00
John-Michael Faircloth 9832517d27
[ldap] auth method fix request_timeout (#11975) 
* [ldap] auth method fix request_timeout

* add changelog

* Update sdk/helper/ldaputil/config_test.go

Co-authored-by: Calvin Leung Huang <1883212+calvn@users.noreply.github.com>

* Update sdk/helper/ldaputil/config_test.go

Co-authored-by: Calvin Leung Huang <1883212+calvn@users.noreply.github.com>

* Update changelog/11975.txt

Co-authored-by: Calvin Leung Huang <1883212+calvn@users.noreply.github.com>

Co-authored-by: Calvin Leung Huang <1883212+calvn@users.noreply.github.com>
 2021-07-01 13:33:01 -05:00
Mike Green 7878db7c2c
Add link to newish learn upgrade guide (#11748) 2021-07-01 08:12:57 -07:00
Pratyoy Mukhopadhyay c7e6a07939
Augment lease revocation metrics (#11954) 
* [VAULT-1982] Add metric for irrevocable leases

* [VAULT-1982] Add metric for tracking worker count per queue

* [VAULT-1982] Update external docs

* [VAULT-1982] Add nil check on metrics sink

* [VAULT-1982] Update metric name, fix access patterns

* [VAULT-1982] Add locking when marking leases as irrevocable

* [VAULT-1982] Remove workers per mount metric

* [vault-1982] Misc review fixes

* [VAULT-1982] minor refactor

* [VAULT-1982] Add/update some comments
 2021-06-30 14:37:36 -07:00
swayne275 fd517e6114
remove trailing / on leases API endpoint (#11959) 2021-06-30 13:02:26 -06:00
swayne275 f882c31856
update oss files with changes from ent PR #1928 (#11965) 2021-06-29 15:02:30 -06:00
Nick Cabatoff 7ad3f74e07
Add overlooked 1.7 agent cache eventual consistency options. (#11964) 2021-06-29 15:36:10 -04:00
Austin Gebauer b34e24fa64
docs: AWS KMS updates for key management secrets engine (#11958) 2021-06-29 10:31:25 -07:00
MilenaHC 02d45f3a66
Update ElasticSearch DB plugin to v0.8.0 (#11957) 
* update elasticsearch database plugin to v0.8.0

* add changelog

* update api-docs
 2021-06-29 08:07:00 -05:00
Lars Lehtonen 27679e4fda
fix dropped errors in external_tests (#11947) 
* vault/external_tests/token: fix dropped test error

* vault/external_tests/identity: fix dropped test errors
 2021-06-29 09:04:26 -04:00
swayne275 67bc4fdabd
Require special privileges to list irrevocable leases (#11888) 
* add leases path to sudo required set

* update TestSystemBackend_RootPaths with new special privilege paths

* note that list-leases requires sudo

* minor typo fixes
 2021-06-28 16:51:47 -06:00
Sam Salisbury e7bbd110ad
ci: update go_test to match one from ent (#11951) 2021-06-28 16:07:00 +01:00
Theron Voran 52f78f1d54
Adding changelog for #11502 (#11944) 2021-06-25 15:41:08 -07:00
Hridoy Roy f3895f7cce
oss part of license diagnose (#11939) 2021-06-25 14:18:34 -07:00
swayne275 597c3d1296
Vault-1983: Use fairsharing to distribute workers between queues (#11789) 
* prelim fairshare prototype, untested and prototype status

* add tests for new fairshare infra - this likely fails tests for being racy

* probably fix races for code and test

* one more lock to fix for races

* fairsharing queue work distribution, tests, fixes, etc

* comment, shorten wait time

* typos and comments

* fix inverted worker count logic

* Update helper/fairshare/jobmanager.go

typo

* Update helper/fairshare/jobmanager.go

clarify comment

* move back to round robin between queues

* improvements from self review

* add job manager stress test
 2021-06-25 14:06:49 -06:00
Jason O'Donnell b2c9b3c344
plugins/ad: Add rotate-role endpoint (#11942) 
* plugins/ad: add rotate-role

* Add doc

* changelog

* Add note about rotate-role in overview
 2021-06-25 14:00:03 -04:00
Sam Salisbury d4fa62e979
ci: cache go modules (#11935) 2021-06-25 17:17:05 +01:00
Theron Voran 5c5a57626e
docs: vault-helm add license update steps (#11911) 
Co-authored-by: Tom Proctor <tomhjp@users.noreply.github.com>
 2021-06-25 08:49:48 -07:00