luxolus/open-vault
2
0
Fork 0
Code Issues 1 Pull requests Releases Activity
open-vault/command
History
Jeff Mitchell 5d44c54947
Changes the way policies are reported in audit logs (#4747) 
* This changes the way policies are reported in audit logs.

Previously, only policies tied to tokens would be reported. This could
make it difficult to perform after-the-fact analysis based on both the
initial response entry and further requests. Now, the full set of
applicable policies from both the token and any derived policies from
Identity are reported.

To keep things consistent, token authentications now also return the
full set of policies in api.Secret.Auth responses, so this both makes it
easier for users to understand their actual full set, and it matches
what the audit logs now report.
2018-06-14 09:49:33 -04:00
..
config Move checkHCLKeys into hclutil (#4749) 2018-06-12 12:38:08 -04:00
server Move checkHCLKeys into hclutil (#4749) 2018-06-12 12:38:08 -04:00
test-fixtures Remove config from Meta; it's only used right now with the token helper. 2016-04-01 16:02:18 -04:00
token Errwrap everywhere (#4252) 2018-04-05 11:49:21 -04:00
approle_concurrency_integ_test.go Move to "github.com/hashicorp/go-hclog" (#4227) 2018-04-02 17:46:59 -07:00
audit.go Make audit a subcommand 2017-10-24 09:30:47 -04:00
audit_disable.go Make audit a subcommand 2017-10-24 09:30:47 -04:00
audit_disable_test.go Make audit a subcommand 2017-10-24 09:30:47 -04:00
audit_enable.go Make audit a subcommand 2017-10-24 09:30:47 -04:00
audit_enable_test.go Adding tests to ensure all backends are mountable (#3861) 2018-02-01 11:30:04 -05:00
audit_list.go CLI Enhancements (#3897) 2018-02-12 18:12:16 -05:00
audit_list_test.go Update audit-list command 2017-10-24 09:28:06 -04:00
auth.go Prevent warnings from showing in individual commands when format is not table, in addition to the existing hiding of higher-level deprecation warnings 2018-05-23 17:13:39 -04:00
auth_disable.go Introduce auth as a subcommand 2017-10-24 09:30:47 -04:00
auth_disable_test.go Always use a local test server (#4207) 2018-03-28 10:34:37 -04:00
auth_enable.go KV: Update 'versioned' naming to 'v2' (#4293) 2018-04-09 09:39:32 -07:00
auth_enable_test.go Adding tests to ensure all backends are mountable (#3861) 2018-02-01 11:30:04 -05:00
auth_help.go Fix confusing error messages around help for 'vault auth' (#4058) 2018-03-01 10:55:24 -05:00
auth_help_test.go Always use a local test server (#4207) 2018-03-28 10:34:37 -04:00
auth_list.go Show mount accessors in normal secrets/auth list commands (#4676) 2018-06-01 10:20:09 -04:00
auth_list_test.go Add new auth-list command 2017-10-24 09:28:06 -04:00
auth_test.go Introduce auth as a subcommand 2017-10-24 09:30:47 -04:00
auth_tune.go Add -version support to tuning commands. (#4323) 2018-04-09 21:12:09 -04:00
auth_tune_test.go Always use a local test server (#4207) 2018-03-28 10:34:37 -04:00
base.go Fix typo (#4607) 2018-05-22 08:30:13 -04:00
base_flags.go Errwrap everywhere (#4252) 2018-04-05 11:49:21 -04:00
base_helpers.go Spelling (#4119) 2018-03-20 14:54:10 -04:00
base_helpers_test.go Expand and centralize helpers 2017-10-24 09:28:05 -04:00
base_predict.go Add API functions and completions for plugins (#4194) 2018-03-26 13:40:33 -04:00
base_predict_test.go Add API functions and completions for plugins (#4194) 2018-03-26 13:40:33 -04:00
command_test.go Kv preflight (#4430) 2018-04-23 15:00:02 -07:00
commands.go Add GCP auth helper (#4654) 2018-05-29 20:36:24 -04:00
config.go Move checkHCLKeys into hclutil (#4749) 2018-06-12 12:38:08 -04:00
config_test.go Fix output-related tests (#4288) 2018-04-05 20:43:29 -04:00
delete.go Rejig 404 handling again. (#4264) 2018-04-04 04:41:46 -04:00
delete_test.go Always use a local test server (#4207) 2018-03-28 10:34:37 -04:00
format.go Changes the way policies are reported in audit logs (#4747) 2018-06-14 09:49:33 -04:00
format_test.go Don't use environment as a mechanism for floating format around. (#4622) 2018-05-23 16:45:17 -04:00
identity_group_aliases_integ_test.go Move to "github.com/hashicorp/go-hclog" (#4227) 2018-04-02 17:46:59 -07:00
kv.go command/kv: Add a "kv" subcommand for using the key-value store (#4168) 2018-03-21 15:02:41 -07:00
kv_delete.go Fix writing to KVv2 root via kv put (#4726) 2018-06-08 13:45:47 -04:00
kv_destroy.go Fix writing to KVv2 root via kv put (#4726) 2018-06-08 13:45:47 -04:00
kv_enable_versioning.go KV: Update 'versioned' naming to 'v2' (#4293) 2018-04-09 09:39:32 -07:00
kv_get.go Fallback to version 1 if the vault server is too old to have the kv preflight endpoint (#4445) 2018-04-24 15:49:06 -07:00
kv_helpers.go Fix writing to KVv2 root via kv put (#4726) 2018-06-08 13:45:47 -04:00
kv_list.go Kv preflight (#4430) 2018-04-23 15:00:02 -07:00
kv_metadata.go command/kv: Add a "kv" subcommand for using the key-value store (#4168) 2018-03-21 15:02:41 -07:00
kv_metadata_delete.go Fix writing to KVv2 root via kv put (#4726) 2018-06-08 13:45:47 -04:00
kv_metadata_get.go Fix writing to KVv2 root via kv put (#4726) 2018-06-08 13:45:47 -04:00
kv_metadata_put.go Fix writing to KVv2 root via kv put (#4726) 2018-06-08 13:45:47 -04:00
kv_patch.go Fix help output in kv_patch 2018-04-25 03:21:13 -04:00
kv_put.go Fallback to version 1 if the vault server is too old to have the kv preflight endpoint (#4445) 2018-04-24 15:49:06 -07:00
kv_test.go Kv preflight (#4430) 2018-04-23 15:00:02 -07:00
kv_undelete.go Fix writing to KVv2 root via kv put (#4726) 2018-06-08 13:45:47 -04:00
lease.go Add lease subcommand 2017-10-24 09:30:47 -04:00
lease_renew.go Prevent warnings from showing in individual commands when format is not table, in addition to the existing hiding of higher-level deprecation warnings 2018-05-23 17:13:39 -04:00
lease_renew_test.go CLI Enhancements (#3897) 2018-02-12 18:12:16 -05:00
lease_revoke.go Add lease subcommand 2017-10-24 09:30:47 -04:00
lease_revoke_test.go Add lease subcommand 2017-10-24 09:30:47 -04:00
list.go Allow returning warnings and other data in 404s in the Go API (#4256) 2018-04-03 22:35:45 -04:00
list_test.go CLI Enhancements (#3897) 2018-02-12 18:12:16 -05:00
login.go Prevent warnings from showing in individual commands when format is not table, in addition to the existing hiding of higher-level deprecation warnings 2018-05-23 17:13:39 -04:00
login_test.go Spelling (#4119) 2018-03-20 14:54:10 -04:00
main.go Don't use environment as a mechanism for floating format around. (#4622) 2018-05-23 16:45:17 -04:00
operator.go Add "operator" subcommand 2017-10-24 09:30:48 -04:00
operator_generate_root.go update docs and help text to include 'operator' (#4712) 2018-06-06 21:11:21 -07:00
operator_generate_root_test.go Always use a local test server (#4207) 2018-03-28 10:34:37 -04:00
operator_init.go update docs and help text to include 'operator' (#4712) 2018-06-06 21:11:21 -07:00
operator_init_test.go Also exclude init command from race detector 2018-02-16 11:09:36 -05:00
operator_key_status.go CLI Enhancements (#3897) 2018-02-12 18:12:16 -05:00
operator_key_status_test.go Always use a local test server (#4207) 2018-03-28 10:34:37 -04:00
operator_rekey.go update docs and help text to include 'operator' (#4712) 2018-06-06 21:11:21 -07:00
operator_rekey_test.go Exclude rekey command tests from race detector 2018-02-08 13:34:45 -05:00
operator_seal.go update docs and help text to include 'operator' (#4712) 2018-06-06 21:11:21 -07:00
operator_seal_test.go Add "operator" subcommand 2017-10-24 09:30:48 -04:00
operator_step_down.go Add "operator" subcommand 2017-10-24 09:30:48 -04:00
operator_step_down_test.go Add "operator" subcommand 2017-10-24 09:30:48 -04:00
operator_unseal.go CLI Enhancements (#3897) 2018-02-12 18:12:16 -05:00
operator_unseal_test.go Don't use environment as a mechanism for floating format around. (#4622) 2018-05-23 16:45:17 -04:00
path_help.go Update path-help command 2017-10-24 09:30:48 -04:00
path_help_test.go Fix bad rebase 2017-10-24 09:39:34 -04:00
path_map_upgrade_api_test.go Move to "github.com/hashicorp/go-hclog" (#4227) 2018-04-02 17:46:59 -07:00
pgp_test.go Add helper for decrypting via PGP in tests 2017-10-24 09:28:06 -04:00
policies_deprecated.go Fix compile 2018-03-16 13:55:56 -04:00
policies_deprecated_test.go Add "policy" subcommand 2017-10-24 09:30:48 -04:00
policy.go Fix minor docs and help text issues (#4184) 2018-03-22 09:29:59 -04:00
policy_delete.go Add "policy" subcommand 2017-10-24 09:30:48 -04:00
policy_delete_test.go Always use a local test server (#4207) 2018-03-28 10:34:37 -04:00
policy_fmt.go Use renamed method 2017-10-24 09:39:51 -04:00
policy_fmt_test.go Fix output-related tests (#4288) 2018-04-05 20:43:29 -04:00
policy_list.go CLI Enhancements (#3897) 2018-02-12 18:12:16 -05:00
policy_list_test.go Add "policy" subcommand 2017-10-24 09:30:48 -04:00
policy_read.go CLI Enhancements (#3897) 2018-02-12 18:12:16 -05:00
policy_read_test.go Add "policy" subcommand 2017-10-24 09:30:48 -04:00
policy_write.go Add "policy" subcommand 2017-10-24 09:30:48 -04:00
policy_write_test.go Update policy-write command 2017-10-24 09:29:37 -04:00
read.go CLI Enhancements (#3897) 2018-02-12 18:12:16 -05:00
read_test.go CLI Enhancements (#3897) 2018-02-12 18:12:16 -05:00
rotate.go update docs and help text to include 'operator' (#4712) 2018-06-06 21:11:21 -07:00
rotate_test.go Always use a local test server (#4207) 2018-03-28 10:34:37 -04:00
secrets.go Rename mounts to secrets engines and add the subcommand 2017-10-24 09:30:48 -04:00
secrets_disable.go Rename mounts to secrets engines and add the subcommand 2017-10-24 09:30:48 -04:00
secrets_disable_test.go Rename mounts to secrets engines and add the subcommand 2017-10-24 09:30:48 -04:00
secrets_enable.go KV: Update 'versioned' naming to 'v2' (#4293) 2018-04-09 09:39:32 -07:00
secrets_enable_test.go Fix tests 2018-03-21 23:50:44 -04:00
secrets_list.go Show mount accessors in normal secrets/auth list commands (#4676) 2018-06-01 10:20:09 -04:00
secrets_list_test.go Rename mounts to secrets engines and add the subcommand 2017-10-24 09:30:48 -04:00
secrets_move.go Rename mounts to secrets engines and add the subcommand 2017-10-24 09:30:48 -04:00
secrets_move_test.go Always use a local test server (#4207) 2018-03-28 10:34:37 -04:00
secrets_tune.go Add -version support to tuning commands. (#4323) 2018-04-09 21:12:09 -04:00
secrets_tune_test.go Always use a local test server (#4207) 2018-03-28 10:34:37 -04:00
server.go update docs and help text to include 'operator' (#4712) 2018-06-06 21:11:21 -07:00
server_test.go Do not fail if api_addr and cluster_addr are empty (#4286) 2018-04-05 12:54:15 -04:00
ssh.go Only append the UserKnownHostsFile ssh flag when required (#4674) 2018-06-01 09:56:22 -04:00
ssh_test.go Update ssh command 2017-10-24 09:30:46 -04:00
status.go CLI Enhancements (#3897) 2018-02-12 18:12:16 -05:00
status_test.go Fix bad rebase 2017-10-24 09:39:34 -04:00
token.go Add token as a subcommand 2017-10-24 09:30:47 -04:00
token_capabilities.go Fix panic when running capabilities CLI command with multiple paths (#4553) 2018-05-11 11:58:12 -04:00
token_capabilities_test.go Fix panic when running capabilities CLI command with multiple paths (#4553) 2018-05-11 11:58:12 -04:00
token_create.go Prevent warnings from showing in individual commands when format is not table, in addition to the existing hiding of higher-level deprecation warnings 2018-05-23 17:13:39 -04:00
token_create_test.go CLI Enhancements (#3897) 2018-02-12 18:12:16 -05:00
token_lookup.go CLI Enhancements (#3897) 2018-02-12 18:12:16 -05:00
token_lookup_test.go CLI Enhancements (#3897) 2018-02-12 18:12:16 -05:00
token_renew.go Prevent warnings from showing in individual commands when format is not table, in addition to the existing hiding of higher-level deprecation warnings 2018-05-23 17:13:39 -04:00
token_renew_test.go CLI Enhancements (#3897) 2018-02-12 18:12:16 -05:00
token_revoke.go Add token as a subcommand 2017-10-24 09:30:47 -04:00
token_revoke_test.go Always use a local test server (#4207) 2018-03-28 10:34:37 -04:00
unwrap.go CLI Enhancements (#3897) 2018-02-12 18:12:16 -05:00
unwrap_test.go Spelling (#4119) 2018-03-20 14:54:10 -04:00
util.go Changes the way policies are reported in audit logs (#4747) 2018-06-14 09:49:33 -04:00
version.go Update version command 2017-10-24 09:30:48 -04:00
version_test.go Always use a local test server (#4207) 2018-03-28 10:34:37 -04:00
write.go Rejig 404 handling again. (#4264) 2018-04-04 04:41:46 -04:00
write_test.go Update write command 2017-10-24 09:30:48 -04:00