Commit Graph

4714 Commits

Author SHA1 Message Date
Leon Wee
45f44e4432 Add option for the logging middleware to log real IP (#2002)
This commit adds the option (enabled via environment variable) to the
logging middleware to log real/originating IP address of a client based
on specific headers.

Three headers are supported: True-Client-IP, X-Real-IP, X-Forwarded-For.

This is particularly useful when there is proxy server(s) sitting
between step-ca and client.

Implements #1995
2024-09-24 16:14:07 +03:00
step-ci
5909db6501 Merge pull request #2009 from smallstep/dependabot/go_modules/cloud.google.com/go/longrunning-0.6.1
Bump cloud.google.com/go/longrunning from 0.6.0 to 0.6.1
2024-09-23 08:59:13 -07:00
step-ci
3520d17f11 Merge pull request #2007 from smallstep/dependabot/go_modules/github.com/prometheus/client_golang-1.20.4
Bump github.com/prometheus/client_golang from 1.20.3 to 1.20.4
2024-09-23 08:58:53 -07:00
dependabot[bot]
27b1dd45f6 Bump cloud.google.com/go/longrunning from 0.6.0 to 0.6.1
Bumps [cloud.google.com/go/longrunning](https://github.com/googleapis/google-cloud-go) from 0.6.0 to 0.6.1.
- [Release notes](https://github.com/googleapis/google-cloud-go/releases)
- [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/CHANGES.md)
- [Commits](https://github.com/googleapis/google-cloud-go/compare/v0.6.0...auth/v0.6.1)

---
updated-dependencies:
- dependency-name: cloud.google.com/go/longrunning
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-09-23 15:54:59 +00:00
dependabot[bot]
b599056f8b Bump github.com/prometheus/client_golang from 1.20.3 to 1.20.4
Bumps [github.com/prometheus/client_golang](https://github.com/prometheus/client_golang) from 1.20.3 to 1.20.4.
- [Release notes](https://github.com/prometheus/client_golang/releases)
- [Changelog](https://github.com/prometheus/client_golang/blob/main/CHANGELOG.md)
- [Commits](https://github.com/prometheus/client_golang/compare/v1.20.3...v1.20.4)

---
updated-dependencies:
- dependency-name: github.com/prometheus/client_golang
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-09-23 15:54:51 +00:00
step-ci
2dc75cfd89 Merge pull request #2005 from smallstep/dependabot/go_modules/google.golang.org/api-0.198.0
Bump google.golang.org/api from 0.197.0 to 0.198.0
2024-09-23 08:53:37 -07:00
step-ci
ab71b58060 Merge pull request #2006 from smallstep/dependabot/go_modules/cloud.google.com/go/security-1.18.1
Bump cloud.google.com/go/security from 1.18.0 to 1.18.1
2024-09-23 08:53:04 -07:00
step-ci
0a8ac0314e Merge pull request #2008 from smallstep/dependabot/go_modules/github.com/hashicorp/vault/api/auth/kubernetes-0.8.0
Bump github.com/hashicorp/vault/api/auth/kubernetes from 0.7.0 to 0.8.0
2024-09-23 08:52:34 -07:00
dependabot[bot]
65aae5d6a7 Bump github.com/hashicorp/vault/api/auth/kubernetes from 0.7.0 to 0.8.0
Bumps [github.com/hashicorp/vault/api/auth/kubernetes](https://github.com/hashicorp/vault) from 0.7.0 to 0.8.0.
- [Release notes](https://github.com/hashicorp/vault/releases)
- [Changelog](https://github.com/hashicorp/vault/blob/main/CHANGELOG-v0.md)
- [Commits](https://github.com/hashicorp/vault/compare/v0.7.0...v0.8.0)

---
updated-dependencies:
- dependency-name: github.com/hashicorp/vault/api/auth/kubernetes
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-09-23 15:13:31 +00:00
dependabot[bot]
964ecd92ce Bump cloud.google.com/go/security from 1.18.0 to 1.18.1
Bumps [cloud.google.com/go/security](https://github.com/googleapis/google-cloud-go) from 1.18.0 to 1.18.1.
- [Release notes](https://github.com/googleapis/google-cloud-go/releases)
- [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/documentai/CHANGES.md)
- [Commits](https://github.com/googleapis/google-cloud-go/compare/kms/v1.18.0...dlp/v1.18.1)

---
updated-dependencies:
- dependency-name: cloud.google.com/go/security
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-09-23 15:13:22 +00:00
dependabot[bot]
ebe782be8a Bump google.golang.org/api from 0.197.0 to 0.198.0
Bumps [google.golang.org/api](https://github.com/googleapis/google-api-go-client) from 0.197.0 to 0.198.0.
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)
- [Commits](https://github.com/googleapis/google-api-go-client/compare/v0.197.0...v0.198.0)

---
updated-dependencies:
- dependency-name: google.golang.org/api
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-09-23 15:13:07 +00:00
step-ci
e7841d889b Merge pull request #1998 from smallstep/dependabot/go_modules/google.golang.org/api-0.197.0
Bump google.golang.org/api from 0.196.0 to 0.197.0
2024-09-17 01:31:57 -07:00
step-ci
cb6e474959 Merge pull request #1999 from smallstep/dependabot/go_modules/github.com/hashicorp/vault/api/auth/approle-0.8.0
Bump github.com/hashicorp/vault/api/auth/approle from 0.7.0 to 0.8.0
2024-09-17 01:31:09 -07:00
dependabot[bot]
dee71eb9ce Bump google.golang.org/api from 0.196.0 to 0.197.0
Bumps [google.golang.org/api](https://github.com/googleapis/google-api-go-client) from 0.196.0 to 0.197.0.
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)
- [Commits](https://github.com/googleapis/google-api-go-client/compare/v0.196.0...v0.197.0)

---
updated-dependencies:
- dependency-name: google.golang.org/api
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-09-17 08:08:06 +00:00
step-ci
705f90db09 Merge pull request #1997 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.52.0
Bump go.step.sm/crypto from 0.51.2 to 0.52.0
2024-09-17 01:06:29 -07:00
dependabot[bot]
4b19f8153c Bump github.com/hashicorp/vault/api/auth/approle from 0.7.0 to 0.8.0
Bumps [github.com/hashicorp/vault/api/auth/approle](https://github.com/hashicorp/vault) from 0.7.0 to 0.8.0.
- [Release notes](https://github.com/hashicorp/vault/releases)
- [Changelog](https://github.com/hashicorp/vault/blob/main/CHANGELOG-v0.md)
- [Commits](https://github.com/hashicorp/vault/compare/v0.7.0...v0.8.0)

---
updated-dependencies:
- dependency-name: github.com/hashicorp/vault/api/auth/approle
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-09-17 07:57:25 +00:00
step-ci
bc56c9a174 Merge pull request #1996 from smallstep/dependabot/go_modules/github.com/hashicorp/vault/api/auth/aws-0.8.0
Bump github.com/hashicorp/vault/api/auth/aws from 0.7.0 to 0.8.0
2024-09-17 00:56:26 -07:00
step-ci
d7168a6464 Merge pull request #2000 from smallstep/dependabot/go_modules/github.com/slackhq/nebula-1.9.4
Bump github.com/slackhq/nebula from 1.9.3 to 1.9.4
2024-09-17 00:55:29 -07:00
dependabot[bot]
e9f3bc4ef4 Bump github.com/slackhq/nebula from 1.9.3 to 1.9.4
Bumps [github.com/slackhq/nebula](https://github.com/slackhq/nebula) from 1.9.3 to 1.9.4.
- [Release notes](https://github.com/slackhq/nebula/releases)
- [Changelog](https://github.com/slackhq/nebula/blob/master/CHANGELOG.md)
- [Commits](https://github.com/slackhq/nebula/compare/v1.9.3...v1.9.4)

---
updated-dependencies:
- dependency-name: github.com/slackhq/nebula
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-09-16 15:29:27 +00:00
dependabot[bot]
edba68b650 Bump go.step.sm/crypto from 0.51.2 to 0.52.0
Bumps [go.step.sm/crypto](https://github.com/smallstep/crypto) from 0.51.2 to 0.52.0.
- [Release notes](https://github.com/smallstep/crypto/releases)
- [Commits](https://github.com/smallstep/crypto/compare/v0.51.2...v0.52.0)

---
updated-dependencies:
- dependency-name: go.step.sm/crypto
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-09-16 15:28:55 +00:00
dependabot[bot]
6be2a41ead Bump github.com/hashicorp/vault/api/auth/aws from 0.7.0 to 0.8.0
Bumps [github.com/hashicorp/vault/api/auth/aws](https://github.com/hashicorp/vault) from 0.7.0 to 0.8.0.
- [Release notes](https://github.com/hashicorp/vault/releases)
- [Changelog](https://github.com/hashicorp/vault/blob/main/CHANGELOG-v0.md)
- [Commits](https://github.com/hashicorp/vault/compare/v0.7.0...v0.8.0)

---
updated-dependencies:
- dependency-name: github.com/hashicorp/vault/api/auth/aws
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-09-16 15:28:45 +00:00
Max
364629e2a2 [ci] Missing permission in goreleaser job (#1993) 2024-09-13 10:05:38 -07:00
Max
7177451ec1 Update CHANGELOG for v0.27.3 (#1992)
* Update CHANGELOG for v0.27.3

Co-authored-by: Herman Slatman <hslatman@users.noreply.github.com>
2024-09-12 14:24:40 -07:00
Herman Slatman
c118a2a154 Merge pull request #1976 from leonweecs/leonweecs/vault-aws-auth
Add AWS auth method for Vault RA mode
2024-09-12 10:35:30 +02:00
Leon Wee
78e7678c58 Add AWS auth method for Vault RA mode
This commit adds the AWS auth method for Vault RA mode following similar
pattern in the existing approle and kubernetes methods.

This auth method supports both iam and ec2 auth type, see
https://developer.hashicorp.com/vault/docs/auth/aws for more info.

Implements #1946
2024-09-12 15:43:02 +12:00
step-ci
5b1eebd756 Merge pull request #1987 from smallstep/dependabot/go_modules/google.golang.org/api-0.196.0
Bump google.golang.org/api from 0.195.0 to 0.196.0
2024-09-10 04:19:29 -07:00
dependabot[bot]
a42ac7d670 Bump google.golang.org/api from 0.195.0 to 0.196.0
Bumps [google.golang.org/api](https://github.com/googleapis/google-api-go-client) from 0.195.0 to 0.196.0.
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)
- [Commits](https://github.com/googleapis/google-api-go-client/compare/v0.195.0...v0.196.0)

---
updated-dependencies:
- dependency-name: google.golang.org/api
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-09-10 11:14:06 +00:00
step-ci
9fa9886910 Merge pull request #1988 from smallstep/dependabot/go_modules/golang.org/x/net-0.29.0
Bump golang.org/x/net from 0.28.0 to 0.29.0
2024-09-10 04:13:18 -07:00
dependabot[bot]
2bd33590de Bump golang.org/x/net from 0.28.0 to 0.29.0
Bumps [golang.org/x/net](https://github.com/golang/net) from 0.28.0 to 0.29.0.
- [Commits](https://github.com/golang/net/compare/v0.28.0...v0.29.0)

---
updated-dependencies:
- dependency-name: golang.org/x/net
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-09-10 11:07:30 +00:00
step-ci
6703b88292 Merge pull request #1990 from smallstep/dependabot/go_modules/golang.org/x/crypto-0.27.0
Bump golang.org/x/crypto from 0.26.0 to 0.27.0
2024-09-10 04:06:38 -07:00
step-ci
6b6c4e94fc Merge pull request #1989 from smallstep/dependabot/go_modules/github.com/prometheus/client_golang-1.20.3
Bump github.com/prometheus/client_golang from 1.20.2 to 1.20.3
2024-09-10 04:06:17 -07:00
dependabot[bot]
6d789f9f7e Bump golang.org/x/crypto from 0.26.0 to 0.27.0
Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.26.0 to 0.27.0.
- [Commits](https://github.com/golang/crypto/compare/v0.26.0...v0.27.0)

---
updated-dependencies:
- dependency-name: golang.org/x/crypto
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-09-09 15:08:44 +00:00
dependabot[bot]
847f0c1ffd Bump github.com/prometheus/client_golang from 1.20.2 to 1.20.3
Bumps [github.com/prometheus/client_golang](https://github.com/prometheus/client_golang) from 1.20.2 to 1.20.3.
- [Release notes](https://github.com/prometheus/client_golang/releases)
- [Changelog](https://github.com/prometheus/client_golang/blob/v1.20.3/CHANGELOG.md)
- [Commits](https://github.com/prometheus/client_golang/compare/v1.20.2...v1.20.3)

---
updated-dependencies:
- dependency-name: github.com/prometheus/client_golang
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-09-09 15:08:41 +00:00
step-ci
6b87cc4085 Merge pull request #1983 from smallstep/dependabot/go_modules/github.com/Masterminds/sprig/v3-3.3.0
Bump github.com/Masterminds/sprig/v3 from 3.2.3 to 3.3.0
2024-09-03 02:04:29 -07:00
step-ci
b0a3c4efae Merge pull request #1982 from smallstep/dependabot/go_modules/google.golang.org/api-0.195.0
Bump google.golang.org/api from 0.194.0 to 0.195.0
2024-09-03 02:02:47 -07:00
dependabot[bot]
3e4ddc18c2 Bump github.com/Masterminds/sprig/v3 from 3.2.3 to 3.3.0
Bumps [github.com/Masterminds/sprig/v3](https://github.com/Masterminds/sprig) from 3.2.3 to 3.3.0.
- [Release notes](https://github.com/Masterminds/sprig/releases)
- [Changelog](https://github.com/Masterminds/sprig/blob/master/CHANGELOG.md)
- [Commits](https://github.com/Masterminds/sprig/compare/v3.2.3...v3.3.0)

---
updated-dependencies:
- dependency-name: github.com/Masterminds/sprig/v3
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-09-03 08:30:03 +00:00
dependabot[bot]
ce3ef2981f Bump google.golang.org/api from 0.194.0 to 0.195.0
Bumps [google.golang.org/api](https://github.com/googleapis/google-api-go-client) from 0.194.0 to 0.195.0.
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)
- [Commits](https://github.com/googleapis/google-api-go-client/compare/v0.194.0...v0.195.0)

---
updated-dependencies:
- dependency-name: google.golang.org/api
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-09-03 08:30:03 +00:00
step-ci
3f7c5bde79 Merge pull request #1984 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.51.2
Bump go.step.sm/crypto from 0.51.1 to 0.51.2
2024-09-03 01:29:12 -07:00
step-ci
7b6a12bcab Merge pull request #1981 from smallstep/dependabot/go_modules/google.golang.org/grpc-1.66.0
Bump google.golang.org/grpc from 1.65.0 to 1.66.0
2024-09-03 01:28:01 -07:00
dependabot[bot]
624f87b78f Bump go.step.sm/crypto from 0.51.1 to 0.51.2
Bumps [go.step.sm/crypto](https://github.com/smallstep/crypto) from 0.51.1 to 0.51.2.
- [Release notes](https://github.com/smallstep/crypto/releases)
- [Commits](https://github.com/smallstep/crypto/compare/v0.51.1...v0.51.2)

---
updated-dependencies:
- dependency-name: go.step.sm/crypto
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-09-02 15:48:06 +00:00
dependabot[bot]
e180d470b9 Bump google.golang.org/grpc from 1.65.0 to 1.66.0
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.65.0 to 1.66.0.
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](https://github.com/grpc/grpc-go/compare/v1.65.0...v1.66.0)

---
updated-dependencies:
- dependency-name: google.golang.org/grpc
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-09-02 15:47:37 +00:00
Herman Slatman
5af2a9ec6a Merge pull request #1980 from emmanuel-ferdman/wip
Update reference to contributing file
2024-09-02 14:32:48 +02:00
Emmanuel Ferdman
52a4a27972 Update reference to contributing file
Signed-off-by: Emmanuel Ferdman <emmanuelferdman@gmail.com>
2024-09-02 15:21:25 +03:00
step-ci
cc9617e146 Merge pull request #1971 from smallstep/dependabot/go_modules/google.golang.org/api-0.194.0
Bump google.golang.org/api from 0.191.0 to 0.194.0
2024-08-27 05:28:06 -07:00
dependabot[bot]
fc9d5e3d57 Bump google.golang.org/api from 0.191.0 to 0.194.0
Bumps [google.golang.org/api](https://github.com/googleapis/google-api-go-client) from 0.191.0 to 0.194.0.
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)
- [Commits](https://github.com/googleapis/google-api-go-client/compare/v0.191.0...v0.194.0)

---
updated-dependencies:
- dependency-name: google.golang.org/api
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-08-27 12:21:42 +00:00
step-ci
df26821249 Merge pull request #1973 from smallstep/dependabot/go_modules/github.com/prometheus/client_golang-1.20.2
Bump github.com/prometheus/client_golang from 1.20.1 to 1.20.2
2024-08-27 05:16:11 -07:00
step-ci
637a000552 Merge pull request #1974 from smallstep/dependabot/go_modules/cloud.google.com/go/longrunning-0.6.0
Bump cloud.google.com/go/longrunning from 0.5.11 to 0.6.0
2024-08-27 05:15:10 -07:00
dependabot[bot]
d24bf8d066 Bump cloud.google.com/go/longrunning from 0.5.11 to 0.6.0
Bumps [cloud.google.com/go/longrunning](https://github.com/googleapis/google-cloud-go) from 0.5.11 to 0.6.0.
- [Release notes](https://github.com/googleapis/google-cloud-go/releases)
- [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/CHANGES.md)
- [Commits](https://github.com/googleapis/google-cloud-go/compare/longrunning/v0.5.11...v0.6.0)

---
updated-dependencies:
- dependency-name: cloud.google.com/go/longrunning
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-08-27 12:08:53 +00:00
step-ci
eccb85d58a Merge pull request #1975 from smallstep/dependabot/go_modules/cloud.google.com/go/security-1.18.0
Bump cloud.google.com/go/security from 1.17.5 to 1.18.0
2024-08-27 05:07:56 -07:00
dependabot[bot]
3d68156de5 Bump cloud.google.com/go/security from 1.17.5 to 1.18.0
Bumps [cloud.google.com/go/security](https://github.com/googleapis/google-cloud-go) from 1.17.5 to 1.18.0.
- [Release notes](https://github.com/googleapis/google-cloud-go/releases)
- [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/documentai/CHANGES.md)
- [Commits](https://github.com/googleapis/google-cloud-go/compare/retail/v1.17.5...kms/v1.18.0)

---
updated-dependencies:
- dependency-name: cloud.google.com/go/security
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-08-27 10:00:18 +00:00