This project is mirrored from https://gitee.com/NQL886/vault.git. Pull mirroring failed .
Repository mirroring has been paused due to too many failed attempts. It can be resumed by a project maintainer.
  1. 09 Jul, 2019 8 commits
  2. 08 Jul, 2019 8 commits
  3. 06 Jul, 2019 4 commits
  4. 05 Jul, 2019 15 commits
    • Jeff Mitchell's avatar
      Migrate build to use go modules · 3439a349
      Jeff Mitchell authored
      3439a349
    • Mike Jarmy's avatar
      AWS upgrade role entries (#7025) · c48159ea
      Mike Jarmy authored
      * upgrade aws roles
      
      * test upgrade aws roles
      
      * Initialize aws credential backend at mount time
      
      * add a TODO
      
      * create end-to-end test for builtin/credential/aws
      
      * fix bug in initializer
      
      * improve comments
      
      * add Initialize() to logical.Backend
      
      * use Initialize() in Core.enableCredentialInternal()
      
      * use InitializeRequest to call Initialize()
      
      * improve unit testing for framework.Backend
      
      * call logical.Backend.Initialize() from all of the places that it needs to be called.
      
      * implement backend.proto changes for logical.Backend.Initialize()
      
      * persist current role storage version when upgrading aws roles
      
      * format comments correctly
      
      * improve comments
      
      * use postUnseal funcs to initialize backends
      
      * simplify test suite
      
      * improve test suite
      
      * simplify logic in aws role upgrade
      
      * simplify aws credential initialization logic
      
      * simplify logic in aws role upgrade
      
      * use the core's activeContext for initialization
      
      * refac...
      c48159ea
    • Tim Arenz's avatar
      Update tokens.html.md (#6697) · 8b9e9ea1
      Tim Arenz authored
      Fixing miner typo by adding dot.
      8b9e9ea1
    • Brian Shumate's avatar
      Update API docs for Create Token — resolves #7053 (#7056) · 36cf85f2
      Brian Shumate authored
      - Update sample `payload.json`
      - Update sample response
      36cf85f2
    • Justin Weissig's avatar
      docs: spelling (#6838) · 405670d4
      Justin Weissig authored
      Fixed minor spelling error: sychronized/synchronized.
      405670d4
    • Brian Shumate's avatar
      Update Cert Auth Login API docs — resolves #7039 (#7058) · 22e66d6c
      Brian Shumate authored
      - Add `--cert` and `--key` options to `curl` example so that it is
        clearer that the certificate and key must also be passed in
      22e66d6c
    • Daniel Mangum's avatar
      plugin docs: update example code snippet with correct imports and link to... · 420f26b3
      Daniel Mangum authored
      plugin docs: update example code snippet with correct imports and link to developing plugin backends tutorial (#6843)
      Signed-off-by: default avatarhasheddan <georgedanielmangum@gmail.com>
      420f26b3
    • Jeff Mitchell's avatar
      Fix various read only storage errors · ccffa166
      Jeff Mitchell authored
      * Fix various read only storage errors
      
      A mistake we've seen multiple times in our own plugins and that we've
      seen in the GCP plugin now is that control flow (how the code is
      structured, helper functions, etc.) can obfuscate whether an error came
      from storage or some other Vault-core location (in which case likely it
      needs to be a 5XX message) or because of user input (thus 4XX). Error
      handling for functions therefore often ends up always treating errors as
      either user related or internal.
      
      When the error is logical.ErrReadOnly this means that treating errors as
      user errors skips the check that triggers forwarding, instead returning
      a read only view error to the user.
      
      While it's obviously more correct to fix that code, it's not always
      immediately apparent to reviewers or fixers what the issue is and fixing
      it when it's found both requires someone to hit the problem and report
      it (thus exposing bugs to users) and selective targeted refactoring that
      only helps that one specific case.
      
      If instead we check whether the logical.Response is an error and, if so,
      whether it contains the error value, we work around this in all of these
      cases automatically. It feels hacky since it's a coding mistake, but
      it's one we've made too multiple times, and avoiding bugs altogether is
      better for our users.
      ccffa166
    • Brian Kassouf's avatar
      core: Don't shutdown if key upgrades fail due to canceled context (#7070) · 8e93f590
      Brian Kassouf authored
      * core: Don't shutdown if key upgrades fail due to canceled context
      
      * Continue if we are not shutting down
      8e93f590
    • Calvin Leung Huang's avatar
      audit: log invalid wrapping token request/response (#6541) · c3f0f96e
      Calvin Leung Huang authored
      
      * audit: log invalid wrapping token request/response
      
      * Update helper/consts/error.go
      Co-Authored-By: default avatarcalvn <cleung2010@gmail.com>
      
      * update error comments
      
      * Update vault/wrapping.go
      Co-Authored-By: default avatarcalvn <cleung2010@gmail.com>
      
      * update comment
      
      * move validateWrappingToken out of http and into logical
      
      * minor refactor, add test cases
      
      * comment rewording
      
      * refactor validateWrappingToken to perform audit logging
      
      * move ValidateWrappingToken back to wrappingVerificationFunc
      
      * Fix tests
      
      * Review feedback
      c3f0f96e
    • Becca Petrin's avatar
      add a reader that takes stdin (#7074) · 3cc7f4a6
      Becca Petrin authored
      3cc7f4a6
    • Clint's avatar
      Combined Database backend: Add Static Account support to MongoDB (#7003) · 30de18eb
      Clint authored
      * Implement SetCredentials for MongoDB, adding support for static accounts
      
      * rework SetCredentials to split from CreateUser, and to parse the url for database
      
      * Add integration test for mongodb static account rotation
      
      * check the length of the password results to avoid out-of-bounds
      
      * remove unused method
      
      * use the pre-existing test helper for this. Add parse method to helper
      
      * remove unused command
      30de18eb
    • Clint's avatar
      Combined Database backend: Add Static Account support to MySQL (#6970) · 27e295ac
      Clint authored
      
      * temp support for mysql+static accounts
      
      * remove create/update database user for static accounts
      
      * update tests after create/delete removed
      
      * small cleanups
      
      * update postgresql setcredentials test
      
      * temp support for mysql+static accounts
      
      * Add Static Account support to MySQL
      
      * add note that MySQL supports static roles
      
      * remove code comment
      
      * tidy up tests
      
      * Update plugins/database/mysql/mysql_test.go
      Co-Authored-By: default avatarCalvin Leung Huang <cleung2010@gmail.com>
      
      * Update plugins/database/mysql/mysql.go
      Co-Authored-By: default avatarCalvin Leung Huang <cleung2010@gmail.com>
      
      * update what password we test
      
      * refactor CreateUser and SetCredentials to use a common helper
      
      * add close statements for statements in loops
      
      * remove some redundant checks in the mysql test
      
      * use root rotation statements as default for static accounts
      
      * missed a file save
      27e295ac
    • Clint's avatar
      Combined Database backend: Add GenerateCredentials to the CredentialsProducer Interface (#7010) · 7b0f7a49
      Clint authored
      * Add GenerateCredentials to the CredentialsProducer Interface, add default implementation
      
      * Remove GenerateCredentials implementation from database plugins
      7b0f7a49
    • Matthew Irish's avatar
      Actually lazy load swagger ui (#7067) · a6404114
      Matthew Irish authored
      * switch to dynamic imports so that bundling doesn't include swagger-ui-dist in its vendor file
      
      * remove ember-ajax
      
      * delete comment
      
      * update comment about lazy loading in the engine index.js
      a6404114
  5. 03 Jul, 2019 5 commits
    • Jim Kalafut's avatar
      changelog++ · 975db34f
      Jim Kalafut authored
      975db34f
    • Brian Kassouf's avatar
      storage/raft: When restoring a snapshot preseal first (#7011) · 7744e08d
      Brian Kassouf authored
      * storage/raft: When restoring a snapshot preseal first
      
      * best-effort allow standbys to apply the restoreOp before sealing active node
      
      * Don't cache the raft tls key
      
      * Update physical/raft/raft.go
      
      * Move pending raft peers to core
      
      * Fix race on close bool
      
      * Extend the leaderlease time for tests
      
      * Update raft deps
      
      * Fix audit hashing
      
      * Fix race with auditing
      7744e08d
    • Noelle Daley's avatar
      Fix barchart bugs (#7063) · 1760c321
      Noelle Daley authored
      * ensure dropdown works in storybook by handling Dates and strings
      
      * camelcase fix
      
      * ensure tooltip doesn't blink
      1760c321
    • Jim Kalafut's avatar
      Fix issuer (#7064) · d9113f16
      Jim Kalafut authored
      d9113f16
    • Noelle Daley's avatar
      Http request volume/dropdown (#7016) · 17711536
      Noelle Daley authored
      * init dropdown
      
      * add dropdown to storybook
      
      * move http requests components into container
      
      * add event handler for selecting new time window
      
      * no need for this. in the template
      
      * filter bar chart and table
      
      * add bar chart transitions
      
      * handle Last 12 Months in dropdown
      
      * don't use fake data
      
      * start tests
      
      * add jsdoc and notes for storybook
      
      * add container to storybook
      
      * compute filteredCounters when counters change
      
      * move static dropdown options to template
      
      * add tests
      
      * style the dropdown
      
      * use this.elementId
      
      * fix linting errors
      
      * use ember array extensions
      
      * use fillIn instead of page object and make dom assertions consistent
      
      * calculate the correct percent change between months
      
      * use data-test selector instead of id
      
      * show plus or minus next to percent change
      17711536