open-vault/website/source/api/auth
Joel Thompson 3e2006eb13 Allow non-prefix-matched IAM role and instance profile ARNs in AWS auth backend (#4071)
* Update aws auth docs with new semantics

Moving away from implicitly globbed bound_iam_role_arn and
bound_iam_instance_profile_arn variables to make them explicit

* Refactor tests to reduce duplication

auth/aws EC2 login tests had the same flow duplicated a few times, so
refactoring to reduce duplication

* Add tests for aws auth explicit wildcard constraints

* Remove implicit prefix matching from AWS auth backend

In the aws auth backend, bound_iam_role_arn and
bound_iam_instance_profile_arn were ALWAYS prefix matched, and there was
no way to opt out of this implicit prefix matching. This now makes the
implicit prefix matching an explicit opt-in feature by requiring users
to specify a * at the end of an ARN if they want the prefix matching.
2018-03-17 21:24:49 -04:00
..
app-id More naming cleanup 2017-10-24 09:35:03 -04:00
approle approle: Use TypeCommaStringSlice for BoundCIDRList (#4078) 2018-03-08 17:49:08 -05:00
aws Allow non-prefix-matched IAM role and instance profile ARNs in AWS auth backend (#4071) 2018-03-17 21:24:49 -04:00
cert Verify DNS SANs if PermittedDNSDomains is set (#3982) 2018-02-16 17:42:29 -05:00
gcp More naming cleanup 2017-10-24 09:35:03 -04:00
github Oops typo 2017-10-24 09:34:30 -04:00
kubernetes Merge branch 'master-oss' into sethvargo/cli-magic 2018-01-03 14:02:31 -05:00
ldap More naming cleanup 2017-10-24 09:35:03 -04:00
okta Adds the ability to bypass Okta MFA checks. (#3944) 2018-02-09 17:03:49 -05:00
radius More naming cleanup 2017-10-24 09:35:03 -04:00
token Update API endpoint references for revoke-prefix (#3828) 2018-01-22 18:04:43 -05:00
userpass More naming cleanup 2017-10-24 09:35:03 -04:00
index.html.md More naming cleanup 2017-10-24 09:35:03 -04:00