Jeff Mitchell
aa9da9aa64
Merge pull request #941 from hashicorp/armored-pgp-keys
...
Allow ASCII-armored PGP pub keys to be passed into -pgp-keys.
2016-01-18 15:03:08 -07:00
Jeff Mitchell
3ecd88bd5c
Allow ASCII-armored PGP pub keys to be passed into -pgp-keys.
...
Fixes #940
2016-01-18 17:01:52 -05:00
Jeff Mitchell
0e2a0cd5b5
Merge pull request #937 from hashicorp/cubbyhole-existence-check
...
Implement existence check for cubbyhole
2016-01-16 17:35:38 -07:00
Jeff Mitchell
d1c8800676
Implement existence check for cubbyhole
2016-01-16 19:35:11 -05:00
Jeff Mitchell
56c9148b5b
changelog++
2016-01-16 18:03:58 -05:00
Jeff Mitchell
34a35fd58f
Merge pull request #936 from hashicorp/cubbyhole-def-policy
...
Use capabilities rather than policies in default policy. Also add cub…
2016-01-16 18:03:03 -05:00
Jeff Mitchell
280fc12c85
Use capabilities rather than policies in default policy. Also add cubbyhole to it.
2016-01-16 18:02:31 -05:00
Jeff Mitchell
47503076f2
Move rekey to its own files for cleanliness
2016-01-14 17:01:04 -05:00
Jeff Mitchell
427a0f054b
Merge pull request #932 from hashicorp/rekey-PUT
...
Remove need for PUT in rekey. We've decided that POST and PUT are to
2016-01-14 16:53:14 -05:00
Jeff Mitchell
887085afbf
Remove need for PUT in rekey. We've decided that POST and PUT are to
...
stay as synonyms for writes, so there's no reason to limit it for this
operation.
2016-01-14 16:52:34 -05:00
Seth Vargo
3c2b29d528
Do not use compressed javascripts
...
Minifier gets really confused when you give it already-compressed
javascript.
2016-01-14 15:00:41 -05:00
Jeff Mitchell
4f9e1e9843
Keep ordering consistent in config doc, and put HA backends first
2016-01-14 13:55:53 -05:00
Jeff Mitchell
ee7add27d7
Merge pull request #931 from hashicorp/sethvargo/deploy
...
Add scripts to deploy via Atlas
2016-01-14 13:47:57 -05:00
Seth Vargo
7d759586b1
Add scripts to deploy via Atlas
2016-01-14 13:42:53 -05:00
Seth Vargo
9e14bb66f2
Use HTTPS + www where appropriate
2016-01-14 13:42:47 -05:00
Seth Vargo
128805a359
ImageOptim
2016-01-14 13:42:34 -05:00
Seth Vargo
f214841d20
Fix image asset URLs
2016-01-14 13:42:28 -05:00
Seth Vargo
abf2c9f9bd
Remove Heroku stuff
2016-01-14 13:42:13 -05:00
Jeff Mitchell
fc41309120
Merge tag 'v0.4.1'
...
Version 0.4.1
2016-01-14 09:57:21 -05:00
Jeff Mitchell
1a807d58cb
Cut version 0.4.1
2016-01-13 17:29:16 -05:00
Jeff Mitchell
3ba925b379
Bump values to 0.4.1
2016-01-13 17:28:17 -05:00
Jeff Mitchell
21f91f73bb
Update deps, and adjust usage of go-uuid to match new return values
2016-01-13 13:40:08 -05:00
Jeff Mitchell
239164733c
changelog++
2016-01-12 21:19:25 -05:00
Jeff Mitchell
87dbe89d17
Use logical operations instead of strings for comparison
2016-01-12 21:16:31 -05:00
Jeff Mitchell
9e4d9aebfc
Merge pull request #914 from hashicorp/acl-rework
...
More granular ACL capabilities
2016-01-12 21:11:52 -05:00
Jeff Mitchell
fc38dd464e
Store uint32s in radix
2016-01-12 17:24:01 -05:00
Jeff Mitchell
1a3908cd1d
Cleanup
2016-01-12 17:10:48 -05:00
Jeff Mitchell
37dc15f249
Convert map to bitmap
2016-01-12 17:08:10 -05:00
Jeff Mitchell
25ed301313
Add some commenting around create/update
2016-01-12 15:13:54 -05:00
Jeff Mitchell
45b96ed140
Address some more review feedback
2016-01-12 15:09:16 -05:00
Jeff Mitchell
a51f5f2946
Clean up HelpOperation
2016-01-12 14:34:49 -05:00
Jeff Mitchell
e12f396ffa
changelog++
2016-01-12 09:31:07 -05:00
Jeff Mitchell
36bf4f5f90
Merge pull request #924 from richardzone/patch-1
...
Fix typo
2016-01-12 09:30:40 -05:00
Ziyi, LIU
8f76fc2e5f
Fix typo
...
Change "...implements is own login endpoint..." to "...implements its own login endpoint..."
2016-01-12 22:22:13 +08:00
Jeff Mitchell
a0e8f169dd
changelog++
2016-01-12 08:47:33 -05:00
Jeff Mitchell
0478a4f7c2
Fix read panic when an empty argument is given.
...
Fixes #923
2016-01-12 08:46:49 -05:00
Jeff Mitchell
8a086a17d7
Update audit sys docs
2016-01-11 19:08:23 -05:00
Jeff Mitchell
4fa678131a
Make sure VAULT_TOKEN is empty during unit tests
2016-01-09 14:47:55 -05:00
Jeff Mitchell
37c6e2d0ae
changelog++
2016-01-09 14:21:36 -05:00
Jeff Mitchell
ae15fa423a
Merge pull request #878 from seiffert/dynamodb_backend
...
Add DynamoDB physical backend.
2016-01-09 14:16:15 -05:00
Jeff Mitchell
996cb54b99
Fix up PGP tests from earlier code fixes
2016-01-08 22:21:41 -05:00
Jeff Mitchell
d4f85c7241
Don't allow a policy with no name, even though it is a valid slice member
2016-01-08 21:23:40 -05:00
Jeff Mitchell
71e320eae8
Lotsa warnings if you choose not to be safe
2016-01-08 17:35:07 -05:00
Jeff Mitchell
1c9b00524f
Use an array of keys so that if the same fingerprint is used none are lost when using PGP key backup
2016-01-08 14:29:23 -05:00
Jeff Mitchell
839b804e43
Some minor rekey backup fixes
2016-01-08 14:09:40 -05:00
Jeff Mitchell
f3ef23318d
Create more granular ACL capabilities.
...
This commit splits ACL policies into more fine-grained capabilities.
This both drastically simplifies the checking code and makes it possible
to support needed workflows that are not possible with the previous
method. It is backwards compatible; policies containing a "policy"
string are simply converted to a set of capabilities matching previous
behavior.
Fixes #724 (and others).
2016-01-08 13:05:14 -05:00
Jeff Mitchell
45e32756ea
WriteOperation -> UpdateOperation
2016-01-08 13:03:03 -05:00
Paul Seiffert
28adc366aa
Add documentation for the DynamoDB backend
2016-01-08 17:34:31 +01:00
Paul Seiffert
02b9e2debe
Add recovery option to DynamoDB backend
...
When Vault is killed without the chance to clean up the lock
entry in DynamoDB, no further Vault nodes can become leaders after
that.
To recover from this situation, this commit adds an environment
variable and a configuration flag that when set to "1" causes Vault
to delete the lock entry from DynamoDB.
2016-01-08 17:31:37 +01:00
Paul Seiffert
4384afb99d
Explicitly read AWS credentials from environment
2016-01-08 17:31:37 +01:00
