Commit Graph

11630 Commits

Author SHA1 Message Date
Jeff Mitchell
f67d3b51ec Move reload and listenerutil into sdk 2020-02-13 10:40:02 -05:00
ncabatoff
633a5a0715 changelog++ 2020-02-13 09:01:49 -05:00
ncabatoff
4d7bfb4927 Add support for telemetry option metrics_prefix (#8340)
When set, instead of starting with `vault_`, metrics will start with `${prefix}_`.
2020-02-13 09:00:32 -05:00
Jim Kalafut
17dd95096a changelog++ 2020-02-12 23:48:39 -08:00
Jim Kalafut
9d31716ab9 Support processing parameters sent as a URL-encoded form (#8325) 2020-02-12 14:20:22 -08:00
Jim Kalafut
bbf6c2fee6 changelog++ 2020-02-11 21:56:39 -08:00
Becca Petrin
22af019c5b preserve state immediately (#8336) 2020-02-11 13:04:40 -08:00
Chelsea Shaw
1bb54e3b65 UI feature: dart sass (#8327)
* Use dart sass implementation in front end
2020-02-11 11:19:37 -06:00
Sam Salisbury
ffe052acf5 ci: build website docker image only on OSS repo (#8335) 2020-02-11 17:03:54 +00:00
Sam Salisbury
a1190ded7e upgrade to go1.13.7 (#8332) 2020-02-11 15:03:49 +00:00
Daniel Spangenberg
8cc4d924eb changelog++ 2020-02-10 15:50:23 +01:00
Daniel Spangenberg
75461a6522 Fix CLI namespace commands (#8315)
* Fix namespace commands help

* Fix useless prediction for namespace commands

* Add namespace prediction capability
2020-02-09 19:38:39 +01:00
Darshana Sivakumar
9b1e144985 Adding a new replication metric (WAL GC counter) (#8241)
* Adding a new replication metric (WAL GC counter)

Adding a new line about the vault.replication.wal.gc metric

* Update website/pages/docs/internals/telemetry.mdx

Co-authored-by: Brian Kassouf <briankassouf@users.noreply.github.com>
2020-02-07 23:04:59 -08:00
Jim Kalafut
264c446de6 Bundle MongoDB Atlas (#8309) 2020-02-07 14:09:39 -08:00
Daniel Spangenberg
62be2a0e37 changelog++ 2020-02-07 16:14:50 +01:00
Daniel Spangenberg
4b47c4ae29 Update CHANGELOG.md 2020-02-07 16:13:30 +01:00
Daniel Spangenberg
af3b19099f Support CLI autocompletion for nested mounts (#8303)
* Support CLI autocompletion for nested mounts

* Add test for nested autocomplete prediction
2020-02-07 15:58:30 +01:00
ncabatoff
462ef72b74 Update to newest go-metrics, go mod vendor. (#8311) 2020-02-07 09:05:14 -05:00
Michel Vocks
cabf518355 changelog++ 2020-02-07 09:43:06 +01:00
Michel Vocks
2d6cbeab10 Return error when a standby node receives a metrics request (#8280)
* Return error when a standby node receives a metrics request

* fix test

* Add documentation note
2020-02-07 09:30:25 +01:00
Jeff Malnick
51904dc19d fix: rotateStatents -> rotateStatements (#8306) 2020-02-06 14:05:00 -08:00
Chelsea Shaw
a40f912b78 changelog++ 2020-02-06 15:12:45 -06:00
Vlad Ungureanu
201f63cb6d Update vault azure api docs (#8276)
By reading the code looks like `subscription_id` and `resource_group_name` are required in the end https://github.com/hashicorp/vault-plugin-auth-azure/blob/master/path_login.go#L192-L194.
2020-02-06 12:51:34 -08:00
Chelsea Shaw
482ad0a094 [UI] clear policies in cli (#8291)
* fix: entity policies cleared from empty string in UI console

* add test for new use case of empty value
2020-02-06 12:37:38 -06:00
ncabatoff
436c9635f6 changelog++ 2020-02-06 13:31:36 -05:00
ncabatoff
7c7eab59d8 Audit generate root requests and responses. (#8301) 2020-02-06 11:56:37 -05:00
Brian Choy
d231add2ee Fix typo in vault agent injector example docs (#8302)
Fix mispelling of `annotation`.
2020-02-05 15:57:09 -08:00
Clint
34053ea419 Update CHANGELOG.md 2020-02-05 17:02:12 -06:00
Becca Petrin
b788b223d7 update from github.com/hashicorp/gokrb5 to github.com/jcmturner/gokrb5/v8 (#8296) 2020-02-05 14:23:22 -08:00
ncabatoff
f257998ca3 Update seal migration docs re limitations and different scenarios (#8298) 2020-02-05 15:30:04 -05:00
Clint
b2f36e65d6 Update CHANGELOG.md 2020-02-05 14:12:22 -06:00
Clint
66bf106b0f MySQL HA: Return an error if we fail to get a lock on standby (#8229)
* return an error if we fail to get a lock on standby

* Add regression test

* minor refactoring to remove a race condition in the test
2020-02-05 14:08:48 -06:00
Clint
699b87d367 Update CHANGELOG.md 2020-02-05 13:53:34 -06:00
Clint
45cfa720c6 secret/database: Guard against panic with InfluxDB plugin (#8282)
* database/influx: fix panic when trying to revoke user

Guard against other nil responses

* return an error if response is nil, which is unlikely but best safe than sorry

* refactor a deeply nested statement into a function
2020-02-05 13:49:02 -06:00
ncabatoff
5b82df92fa Changes needed so that benchmark-vault can run with Prometheus monitoring (#8295) 2020-02-05 13:45:16 -05:00
Jim Kalafut
02db2b54d3 Add links to changelog Github references (#8293)
Co-authored-by: Daniel Spangenberg <daniel@spangenberg.io>
2020-02-05 08:28:19 -08:00
Daniel Spangenberg
473c5d94f3 changelog++ 2020-02-05 10:56:18 +01:00
Dan Lafeir
783d11d573 Add a specific reference to AWS IAM Unique Identifiers (#8209)
* Add specification about AWS IAM Unique Identifiers

We experienced an issue where IAM roles resources were re-provisioned with the same ARNs and no change had been made to our vault role configuration but users lost access with `-method=aws`. It wasn't immediately clear to us how IAM Unique Identifiers where being used to avoid the same situations outlined in the AWS documentation. We eventually concluded that re-provisioning the roles in our auth/aws/auth would fetch the new IAM Unique Identifiers. 

I hope that this small amendment helps people avoid this problem in the future.
2020-02-04 15:31:48 -08:00
Jamie Finnigan
4aefe1756f fix <name> entity encoding for Secrets Engines Metrics section (#8290) 2020-02-04 15:06:10 -08:00
Daniel Spangenberg
e3f37c7751 Allow FQDNs in DNS Name for PKI Secrets Engine (#8288)
Fixes #4837
2020-02-04 23:46:38 +01:00
Becca Petrin
286bad2917 changelog++ 2020-02-04 13:08:10 -08:00
Michael Golowka
80c3b5245e Update changelog with database plugin bugfixes
Fixes from GH-8240:
- fix inconsistent parameter names
- fix mysql so default static credential rotation statements are used
2020-02-03 13:59:23 -07:00
Michael Golowka
be052618da plugins/database: Allow both {{name}} and {{username}} in MySQL & Postgres (#8240)
* Allow {{name}} or {{username}} in psql templates

* Fix default rotation bug; allow {{user}} and {{username}}
2020-02-03 13:57:28 -07:00
glerb
961155578d Improve clarity of IAM flow explanation (#8275) 2020-02-03 10:14:09 -08:00
ncabatoff
cc57b8baad changelog++ 2020-02-03 12:52:28 -05:00
ncabatoff
45077a4d67 Upgrade okta sdk lib (#8143)
Upgrade to new official Okta sdk lib.  Since it requires an API token, use old unofficial okta lib for no-apitoken case. 

Update test to use newer field names.  Remove obsolete test invalidated by #4798.  Properly handle case where an error was expected and didn't occur.
2020-02-03 12:51:10 -05:00
Calvin Leung Huang
620ae8bba6 ci: add context to website-docker-image job (#8272)
* ci: add context to website-docker-image job

* ci: test context value

* ci: revert test context value
2020-02-03 09:04:33 -08:00
ncabatoff
d1730bdc8d changelog++ 2020-02-03 12:01:11 -05:00
ncabatoff
8cfe91ea9d changelog++ 2020-02-03 11:56:07 -05:00
ncabatoff
7a1bb2ff04 Ensure that http_raw_body is always passed to the audit redaction system as a string
Before this it was passed as a []byte, which doesn't get HMAC'd.  The original non-HMACing behaviour can be obtained by adding "http_raw_body" to audit_non_hmac_response_keys. (#8130)
2020-02-03 11:53:02 -05:00