Jeff Mitchell
|
98d0d23d70
|
Ensure token store is available when looking up token
|
2015-09-01 08:21:47 -04:00 |
|
Jeff Mitchell
|
3f45f3f41b
|
Rename config lease_duration parameters to lease_ttl in line with current standardization efforts
|
2015-08-27 07:50:24 -07:00 |
|
Jeff Mitchell
|
cc232e6f79
|
Address comments from review.
|
2015-08-25 15:33:58 -07:00 |
|
Jeff Mitchell
|
c887df93cc
|
Add support for pgp-keys argument to rekey, as well as tests, plus
refactor common bits out of init.
|
2015-08-25 14:52:13 -07:00 |
|
Jeff Mitchell
|
f57e7892e7
|
Don't store the given public keys in the seal config
|
2015-08-25 14:52:13 -07:00 |
|
Jeff Mitchell
|
2f3e245b0b
|
Add support for "pgp-tokens" parameters to init.
There are thorough unit tests that read the returned
encrypted tokens, seal the vault, and unseal it
again to ensure all works as expected.
|
2015-08-25 14:52:13 -07:00 |
|
Jeff Mitchell
|
93ef9a54bd
|
Internally refactor Lease/LeaseGracePeriod into TTL/GracePeriod
|
2015-08-20 18:00:51 -07:00 |
|
Jeff Mitchell
|
db79dd8c22
|
Don't defer revocation when sealing, and clear out response/auth if there is a token use error
|
2015-08-20 10:37:42 -07:00 |
|
Jeff Mitchell
|
0e8e3660ff
|
Fix #461 properly by defering potential revocation of a token until after the request is fully handled.
|
2015-08-20 10:14:13 -07:00 |
|
Karl Gutwin
|
151ec72d00
|
Add configuration options for default lease duration and max lease duration.
|
2015-07-30 09:42:49 -04:00 |
|
Armon Dadgar
|
41b72a4d39
|
vault: provide view to backend initializer for setup
|
2015-06-30 17:30:43 -07:00 |
|
Armon Dadgar
|
8bc99f8c23
|
helper/uuid: single generateUUID definition
|
2015-06-30 12:38:32 -07:00 |
|
Armon Dadgar
|
496ebe561c
|
vault: cleanups for the audit log changes
|
2015-06-29 15:27:28 -07:00 |
|
Nate Brown
|
b667ef4c71
|
Collapsing audit response logging to a single point
|
2015-06-18 19:48:26 -07:00 |
|
Nate Brown
|
4ec685dc1a
|
Logging authentication errors and bad token usage
|
2015-06-18 18:30:18 -07:00 |
|
Armon Dadgar
|
dbf6cf6e6d
|
vault: support core shutdown
|
2015-06-17 18:23:59 -07:00 |
|
Armon Dadgar
|
5c75a6c5c7
|
vault: ensure token renew does not double register
|
2015-06-17 15:22:50 -07:00 |
|
Armon Dadgar
|
daffef08db
|
vault: reload master key before keyring
|
2015-05-29 14:30:03 -07:00 |
|
Armon Dadgar
|
4f5fde039f
|
vault: all rekey commands should fail as standby
|
2015-05-29 11:52:37 -07:00 |
|
Armon Dadgar
|
5aaad32af8
|
vault: ensure upgrades are cleaned up
|
2015-05-28 16:52:06 -07:00 |
|
Armon Dadgar
|
db0afc9ebe
|
vault: move upgrade logic out of core
|
2015-05-28 16:43:44 -07:00 |
|
Armon Dadgar
|
82ef0b1ac7
|
vault: handle read of key upgrades
|
2015-05-28 16:11:31 -07:00 |
|
Armon Dadgar
|
c60970e743
|
vault: prevent rekey on standby
|
2015-05-28 15:26:35 -07:00 |
|
Armon Dadgar
|
01e890653c
|
vault: more logging
|
2015-05-28 14:15:06 -07:00 |
|
Armon Dadgar
|
0877160754
|
vault: minor rekey cleanups
|
2015-05-28 12:07:52 -07:00 |
|
Armon Dadgar
|
361c722c5c
|
vault: first pass at rekey
|
2015-05-28 11:40:01 -07:00 |
|
Armon Dadgar
|
3bcd32228d
|
vault: lease renewal should not create new lease entry
|
2015-05-15 17:47:39 -07:00 |
|
Armon Dadgar
|
843d9e6484
|
vault: verify login endpoint never returns a secret
|
2015-05-09 11:51:58 -07:00 |
|
Armon Dadgar
|
13ab31f4b5
|
vault: ensure InternalData is never returned from the core
|
2015-05-09 11:47:46 -07:00 |
|
Armon Dadgar
|
c7496772d4
|
vault: defer barrier initialization until as late as possible
|
2015-05-08 11:06:39 -07:00 |
|
Armon Dadgar
|
a6eef6bba3
|
vault: Guard against an invalid seal config
|
2015-05-08 11:05:31 -07:00 |
|
Mitchell Hashimoto
|
727e0e90cd
|
vault: validate advertise addr is valid URL [GH-106]
|
2015-05-02 13:28:33 -07:00 |
|
Mitchell Hashimoto
|
e80111502b
|
vault: way more verbose error if mlock fails [GH-59]
|
2015-04-28 18:56:16 -07:00 |
|
Mitchell Hashimoto
|
b5f8f3b05a
|
vault: add helper/mlock for doing mlock
|
2015-04-28 14:59:43 -07:00 |
|
Mitchell Hashimoto
|
2e55c3de68
|
vault: ability to toggle mlock on core
|
2015-04-27 16:40:14 -07:00 |
|
Armon Dadgar
|
2f0995d650
|
vault: Swap the HAEnabled check with the sealed check
|
2015-04-20 12:19:09 -07:00 |
|
Armon Dadgar
|
c5f914cb34
|
vault: Lock memory when possible
|
2015-04-19 13:42:47 -07:00 |
|
Armon Dadgar
|
4473abd6ce
|
vault: core enforcement of limited use tokens
|
2015-04-17 11:57:56 -07:00 |
|
Armon Dadgar
|
b65e1b3e22
|
vault: using a constant to make @mitchellh feel better
|
2015-04-15 17:19:59 -07:00 |
|
Armon Dadgar
|
76b69b2514
|
vault: thread the display name through
|
2015-04-15 14:12:34 -07:00 |
|
Armon Dadgar
|
9f7143cf44
|
vault: expose the current leader
|
2015-04-14 16:53:40 -07:00 |
|
Armon Dadgar
|
445f64eb39
|
vault: leader should advertise address
|
2015-04-14 16:44:48 -07:00 |
|
Armon Dadgar
|
ec8a41d2d2
|
vault: rename internal variable
|
2015-04-14 16:11:39 -07:00 |
|
Armon Dadgar
|
2820bec479
|
vault: testing standby mode
|
2015-04-14 16:06:58 -07:00 |
|
Armon Dadgar
|
a0e1b90b81
|
vault: reject operation if standby
|
2015-04-14 14:09:11 -07:00 |
|
Armon Dadgar
|
d7102e2661
|
vault: first pass at HA standby mode
|
2015-04-14 14:06:15 -07:00 |
|
Armon Dadgar
|
255e0fbda4
|
vault: enable physical cache in core
|
2015-04-14 11:08:04 -07:00 |
|
Armon Dadgar
|
512b3d7afd
|
vault: Adding metrics profiling
|
2015-04-08 16:43:17 -07:00 |
|
Armon Dadgar
|
466c7575d3
|
Replace VaultID with LeaseID for terminology simplification
|
2015-04-08 13:35:32 -07:00 |
|
Armon Dadgar
|
eaa483ff87
|
vault: Enforce default and max length leasing
|
2015-04-03 15:42:34 -07:00 |