Commit graph

280 commits

Author SHA1 Message Date
Jeff Mitchell 640b30ff7b
Resultant acl (#4386) 2018-04-20 14:19:04 -04:00
Jeff Mitchell 4e444ae2f9 Update gcp plugin 2018-04-17 13:50:28 -04:00
Jeff Mitchell 35c852b97f Bump gcp secrets plugin 2018-04-17 11:59:43 -04:00
Andrew Hamilton 2eb334d156 Updates pester so that retries work (#4322) 2018-04-10 00:34:16 -04:00
Jeff Mitchell 6f1bd385c7 Bump KV plugin 2018-04-09 17:28:32 -04:00
Jeff Mitchell 2d5120fe2a Bump KV plugin and allow -version to work 2018-04-09 16:33:01 -04:00
Brian Kassouf 1f7f21f24f
Update kv plugin (#4320) 2018-04-09 12:47:34 -07:00
Jeff Mitchell 9f435a75eb Update azure plugin 2018-04-09 14:51:14 -04:00
Brian Kassouf 2bb3ecea33
Update kv plugin (#4317) 2018-04-09 10:20:47 -07:00
Brian Kassouf eee819e37e
Update kv plugin (#4315) 2018-04-09 09:52:13 -07:00
Jeff Mitchell 36c507b273 Update vault-plugin-auth-gcp to get client invalidation fix 2018-04-07 21:07:43 -04:00
Chris Hoffman e1edbbde4f
update azure plugin (#4306) 2018-04-07 11:20:22 -04:00
Jeff Mitchell 510a57e7de Update CLI coloring 2018-04-06 14:38:56 -04:00
Jeff Mitchell 7d520e53a5 Update auth-gcp plugin 2018-04-05 17:34:27 -04:00
Jeff Mitchell 27db47828b Bump kv plugin 2018-04-05 14:09:19 -04:00
Chris Hoffman 384b0c0b74
update azure plugin (#4266) 2018-04-04 08:02:37 -04:00
Jeff Mitchell 4a45851681 Update plugins 2018-04-03 22:40:35 -04:00
Jeff Mitchell 8d33a0e089 Bump vkv plugin 2018-04-03 17:09:33 -04:00
Jeff Mitchell 4b687eca3f Update vkv plugin 2018-04-03 15:55:57 -04:00
Jeff Mitchell c10ae3a755 Bump vkv plugin 2018-04-03 15:04:33 -04:00
Jeff Mitchell 9d16593f48 Interim vkv plugin push 2018-04-03 14:34:36 -04:00
Chris Hoffman e293fe84c3 OSS: Adding UI handlers and configurable headers (#390)
* adding UI handlers and UI header configuration

* forcing specific static headers

* properly getting UI config value from config/environment

* fixing formatting in stub UI text

* use http.Header

* case-insensitive X-Vault header check

* fixing var name

* wrap both stubbed and real UI in header handler

* adding test for >1 keys
2018-04-03 09:34:01 -05:00
Becca Petrin 03cf302e9a Move to "github.com/hashicorp/go-hclog" (#4227)
* logbridge with hclog and identical output

* Initial search & replace

This compiles, but there is a fair amount of TODO
and commented out code, especially around the
plugin logclient/logserver code.

* strip logbridge

* fix majority of tests

* update logxi aliases

* WIP fixing tests

* more test fixes

* Update test to hclog

* Fix format

* Rename hclog -> log

* WIP making hclog and logxi love each other

* update logger_test.go

* clean up merged comments

* Replace RawLogger interface with a Logger

* Add some logger names

* Replace Trace with Debug

* update builtin logical logging patterns

* Fix build errors

* More log updates

* update log approach in command and builtin

* More log updates

* update helper, http, and logical directories

* Update loggers

* Log updates

* Update logging

* Update logging

* Update logging

* Update logging

* update logging in physical

* prefixing and lowercase

* Update logging

* Move phyisical logging name to server command

* Fix som tests

* address jims feedback so far

* incorporate brians feedback so far

* strip comments

* move vault.go to logging package

* update Debug to Trace

* Update go-plugin deps

* Update logging based on review comments

* Updates from review

* Unvendor logxi

* Remove null_logger.go
2018-04-02 17:46:59 -07:00
Jeff Mitchell 5590cb63c1 Merge in go-hclog 2018-04-02 16:14:46 -04:00
Jeff Mitchell 95d9e83bc3 Merge in go-hclog 2018-04-02 15:58:31 -04:00
Jeff Mitchell 85584e75f4 Update go-hclog and go-plugin 2018-04-02 14:22:52 -04:00
Jeff Mitchell 7a6f582168
1.10 Updates (#4218) 2018-03-29 15:32:16 -04:00
Chris Hoffman 84ec79a93f
updating azure plugin and deps (#4191) 2018-03-23 16:48:05 -04:00
Jeff Mitchell a62376c429 Remove unneeded dep file 2018-03-21 23:10:34 -04:00
Brian Kassouf ad383e911f Update kv backend and add some docs (#4182)
* Add kv backend

* Move kv in apha order

* Update kv backend and add some docs
2018-03-21 23:10:05 -04:00
Jeff Mitchell 2bb4e7535a Add gcp secrets 2018-03-21 23:07:16 -04:00
Jeff Mitchell 22f3a337f3 Update kv with existence check 2018-03-21 22:58:11 -04:00
Brian Kassouf 3324d6dd12 Add kv backend (#4181) 2018-03-21 22:56:52 -04:00
Chris Hoffman 695eae6ede
adding azure auth plugin (#4180) 2018-03-21 17:35:31 -04:00
Jeff Mitchell 4b491229ba Update hcl 2018-03-20 16:36:37 -04:00
Jeff Mitchell 396ccd8699 Push up changes to prep for release 2018-03-20 14:10:53 -04:00
Jeff Mitchell 7b58d3b2fa Use public forked big package for encrypted_key_storage file until Go 1.10 2018-03-16 10:30:05 -04:00
Jeff Mitchell 8455e25604 Bump complete. Fixes #4094 2018-03-09 10:43:20 -05:00
Brian Kassouf f226fbbbb9
helper/keysutil: Add a storage implementation that uses policies to encrypt paths (#3989)
* helper/keysutil: Add a policy encrypted path storage

* Add vendored deps

* Fix spelling and paths that start with a /

* Add a key version template to change configure the ciphertext prefix

* Use big.Int for base58 instead of external lib

* Update go requirment to 1.10

* Add a version prefix cache

* Move logic to helper function

* Cache the template parts

* Add a storage prefix to policy

* Add an error if the policy passed in is nil

* Pull in the go1.10 version of the math/big package until we can update
2018-03-08 17:58:50 -08:00
Jeff Mitchell ba40b1bd07 Sync plugins 2018-02-26 12:24:04 -05:00
Jeff Mitchell 177ecc946b Bump pkcs7 library version to fix #4024 2018-02-22 20:11:49 -05:00
Jeff Mitchell 15c3bffcc9 Revert "Switch to a forked copy of pkcs7 to fix aws pkcs7 verification error (#4024)"
This reverts commit f75c7dd15784831aef0bd9fda8a230b0a08556f3.
2018-02-22 20:09:19 -05:00
Jeff Mitchell 67e614bac4
Switch to a forked copy of pkcs7 to fix aws pkcs7 verification error (#4024)
Fixes #4014
2018-02-22 08:49:11 -05:00
Jeff Mitchell fb33782593 Update plugins 2018-02-20 14:15:43 -05:00
Jeff Mitchell ca0692c188 Update go-plugin 2018-02-20 14:07:29 -05:00
Jeff Mitchell f29bde0052
Support other names in SANs (#3889) 2018-02-16 17:19:34 -05:00
Seth Vargo cd930b1173 Add support for Google Cloud Spanner (#3977) 2018-02-14 20:31:20 -05:00
Jeff Mitchell 35906aaa6c
Add ChaCha20-Poly1305 support to transit (#3975) 2018-02-14 11:59:46 -05:00
Jeff Mitchell 936eb82604 Update Okta dep.
Fixes #3963
2018-02-14 09:38:46 -05:00
Jeff Mitchell 6f69a40ada Update triton version 2018-02-12 18:27:18 -05:00
Paul Stack 3c683dba92 Adding Manta Storage Backend (#3720)
This PR adds a new Storage Backend for Triton's Object Storage - Manta

```
make testacc TEST=./physical/manta
==> Checking that code complies with gofmt requirements...
==> Checking that build is using go version >= 1.9.1...
go generate
VAULT_ACC=1 go test -tags='vault' ./physical/manta -v  -timeout 45m
=== RUN   TestMantaBackend
--- PASS: TestMantaBackend (61.18s)
PASS
ok  	github.com/hashicorp/vault/physical/manta	61.210s
```

Manta behaves differently to how S3 works - it has no such concepts of Buckets - it is merely a filesystem style object store

Therefore, we have chosen the approach of when writing a secret `foo` it will actually map (on disk) as foo/.vault_value

The reason for this is because if we write the secret `foo/bar` and then try and Delete a key using the name `foo` then Manta
will complain that the folder is not empty because `foo/bar` exists. Therefore, `foo/bar` is written as `foo/bar/.vault_value`

The value of the key is *always* written to a directory tree of the name and put in a `.vault_value` file.
2018-02-12 18:22:41 -05:00
Jeff Mitchell 958afd4019 Bump deps 2018-02-10 19:29:52 -05:00
Jeff Mitchell 8655a1c135
Various PKI updates (#3953) 2018-02-10 10:07:10 -05:00
Jeff Mitchell 3297d3dc92 Update go-plugin 2018-02-06 13:31:13 -05:00
Jeff Mitchell fe6c19d623 Update zookeeper dep
Fixes #3896
2018-02-05 11:22:21 -05:00
Jeff Mitchell 98b479ab58 Bump deps 2018-01-26 18:51:00 -05:00
Jeff Mitchell 063f5a982b Sync plugins 2018-01-26 09:04:48 -05:00
Jeff Mitchell c6f35c3890 Update plugins 2018-01-24 23:24:16 -05:00
Jeff Mitchell 3cea1a4f37 Update go-plugin dep 2018-01-23 18:18:04 -05:00
Calvin Leung Huang 385140ee6b
Version protocol switch (#3833)
* Use version to determine plugin protocol to use

* Remove field from ServeOpts

* Fix missing assignment, handle errors

* contraint -> constraint

* Inject the version string from the vault side

* Fix the version check

* Add grpc support check to database plugins

* Default to use grpc unless missing env var or fail on contraint check

* Add GRPCSupport test

* Add greater than test case

* Add go-version dep
2018-01-23 17:29:26 -05:00
Jeff Mitchell e5e4307713 Add centrify plugin as builtin 2018-01-19 06:03:33 -05:00
Jeff Mitchell ffe3ae9118 Add gcp and kubernetes back now that they're updated 2018-01-19 05:56:34 -05:00
Brian Kassouf 2f19de0305 Add context to storage backends and wire it through a lot of places (#3817) 2018-01-19 01:44:44 -05:00
Jeff Mitchell 85ceb198b8 bump go-plugin 2018-01-18 16:58:03 -05:00
Brian Kassouf 7050c1ca41
gRPC Backend Plugins (#3808)
* Add grpc plugins

* Add grpc plugins

* Translate wrap info to/from proto

* Add nil checks

* Fix nil marshaling errors

* Provide logging through the go-plugin logger

* handle errors in the messages

* Update the TLS config so bidirectional connections work

* Add connectivity checks

* Restart plugin and add timeouts where context is not availible

* Add the response wrap data into the grpc system implementation

* Add leaseoptions to pb.Auth

* Add an error translator

* Add tests for translating the proto objects

* Fix rename of function

* Add tracing to plugins for easier debugging

* Handle plugin crashes with the go-plugin context

* Add test for grpcStorage

* Add tests for backend and system

* Bump go-plugin for GRPCBroker

* Remove RegisterLicense

* Add casing translations for new proto messages

* Use doneCtx in grpcClient

* Use doneCtx in grpcClient

* s/shutdown/shut down/
2018-01-18 13:49:20 -08:00
Jeff Mitchell 3dc9967460 Sync in latest go-plugin 2018-01-17 11:57:24 -05:00
Paweł Słomka b994e83c65 Cleanup of deprecated commands in tests, docs (#3788) 2018-01-15 15:19:28 -05:00
Jeff Mitchell d8009bced1 Merge branch 'master-oss' into sethvargo/cli-magic 2018-01-10 11:15:49 -05:00
Brian Kassouf 64da50c27c
Update plugin deps to include context changes (#3765)
* Update plugin deps to include context changes

* Fix tests
2018-01-08 12:26:13 -08:00
Jeff Mitchell d1803098ae Merge branch 'master-oss' into sethvargo/cli-magic 2018-01-03 14:02:31 -05:00
Jeff Mitchell a14ed7f48d Sync in plugin updates 2017-12-21 08:31:20 -05:00
Jeff Mitchell 77a7c52392
Merge branch 'master' into f-nomad 2017-12-18 12:23:39 -05:00
Jeff Mitchell edab61c204 Pull in new go-cleanhttp to fix data race 2017-12-18 09:40:22 -05:00
Calvin Leung Huang 685b4a27e4 Use cleanhttp.PrintablePathCheckHandler to handle non-printable chara… (#3697) 2017-12-15 20:19:37 -05:00
Jeff Mitchell b478ba8bac
Merge branch 'master' into f-nomad 2017-12-14 16:44:28 -05:00
Jeff Mitchell d70db5df9b
Update go-ldap with our patch for control packets. (#3670)
Fixes #3656
Fixes #3625
Fixes #3402
2017-12-09 10:45:03 -05:00
Nicolas Corrarello a6d3119e3e
Pull master into f-nomad
Signed-off-by: Nicolas Corrarello <nicolas@corrarello.com>
2017-11-29 15:56:37 +00:00
Jeff Mitchell 07dfc1da27 Bump deps 2017-11-07 11:57:05 -05:00
Jeff Mitchell 85ea7363d4 Update gocql dep 2017-11-03 17:30:34 -04:00
Jeff Mitchell dc9d24c69c Update kube stuff 2017-10-27 16:12:14 -04:00
Jeff Mitchell 343d1714c1 Bump deps 2017-10-27 15:06:04 -04:00
Seth Vargo f940fd6a3b
Update vendor 2017-10-24 09:39:34 -04:00
Seth Vargo 6847bb827c
Update vendor complete 2017-10-24 09:26:44 -04:00
Seth Vargo c77072e093
Update vendor libraries for autocomplete and cli 2017-10-24 09:26:43 -04:00
Jeff Mitchell 6c9dd6ed6f Try out a radius fix (#3461) 2017-10-16 16:26:34 -04:00
Vishal Nayak f7ed6732a5 Porting identity store (#3419)
* porting identity to OSS

* changes that glue things together

* add testing bits

* wrapped entity id

* fix mount error

* some more changes to core

* fix storagepacker tests

* fix some more tests

* fix mount tests

* fix http mount tests

* audit changes for identity

* remove upgrade structs on the oss side

* added go-memdb to vendor
2017-10-11 10:21:20 -07:00
Vishal Nayak b46c42179e update deps (#3425)
Update deps for Kubernetes and GCP auth plugins
2017-10-04 22:59:12 -04:00
Chris Hoffman 29ccc35dd5 fixing dependencies 2017-10-02 13:47:03 -04:00
Chris Hoffman 484401689b fixing dependencies 2017-10-02 13:46:42 -04:00
Nicolas Corrarello 4fbf9253a2 Adding further nomad deps 2017-10-02 16:56:39 +01:00
Nicolas Corrarello 57fc8e11da Added nomad as dependency after include fix 2017-10-02 16:48:23 +01:00
Oluwafemi Sule b6ec6351af fix spellings errors (#3400) 2017-09-29 11:52:42 -04:00
Nicolas Corrarello ade157a041 Adding vendor dir 2017-09-29 14:39:59 +01:00
Nicolas Corrarello d7f606d497 Adding vendor dependency 2017-09-29 14:39:24 +01:00
Brian Kassouf 9b0d594d02 Kubernetes auth (#3350)
* Import the kubernetes credential backend

* Add kubernetes docs

* Escape * characters

* Revert "Import the kubernetes credential backend"

This reverts commit f12627a9427bcde7e73cea41dea19d0922f94789.

* Update the vendored directory
2017-09-19 09:27:26 -05:00
Jeff Mitchell 18b193a519 more dep syncing 2017-09-15 21:47:22 -04:00
Jeff Mitchell 511b32b060 Update to new gcp-auth plugin 2017-09-15 15:35:34 -04:00
Jeff Mitchell edcf1722ba Bump deps 2017-09-15 12:44:57 -04:00
Chris Hoffman a2d2f1a543 Adding support for base_url for Okta api (#3316)
* Adding support for base_url for Okta api

* addressing feedback suggestions, bringing back optional group query

* updating docs

* cleaning up the login method

* clear out production flag if base_url is set

* docs updates

* docs updates
2017-09-15 00:27:45 -04:00
Calvin Leung Huang d5da85d154 Update vendored docker deps 2017-09-07 11:05:33 -04:00