Spring/spring-vault
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
599 Commits 13 Branches 0 Tags
2.2.x
Commit Graph

599 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Scott Strang
af40db5dbc Upgrade to Netty 4.1.70.Final 
Update netty version to 4.1.70.Final to address security vulnerabilities

Original pull request: gh-670.
 2021-11-25 10:25:05 +01:00
Mark Paluch
3a2721a13e Consider absent secretId in AppRole authentication steps. 
We now skip secretId retrieval when using AppRole authentication steps to avoid Unknown SecretId configuration errors.

Also, renamed AbsentSecretId.INSTANCE to ABSENT_SECRET_ID to cause more meaningful messages when used in toString.

Closes gh-656
 2021-06-18 09:52:24 +02:00
Willi Schönborn
fd2feffcf0 Bumped Azure Instance Metadata API version to 2017-12-01. 
vmScaleSetName is only exposed in 2017-12-01 and later.
See https://docs.microsoft.com/en-us/azure/virtual-machines/linux/instance-metadata-service\?tabs\=windows\#response-1

Closes gh-644
 2021-06-11 09:42:48 +02:00
Bun-Ny TAN
50213bd9ba Fix assertion message. 
See gh-649
 2021-06-11 09:38:55 +02:00
Mark Paluch
d76963d41e Update Sonatype endpoint. 
Closes gh-641.
 2021-03-16 10:07:07 +01:00
Mark Paluch
d5e197c3bd Upgrade to Reactor Dysprosium SR17. 
Closes gh-627.
 2021-02-16 15:45:26 +01:00
Mark Paluch
c59c7196e7 Upgrade to Spring Framework 5.2.13. 
Closes gh-626.
 2021-02-16 15:44:17 +01:00
Mark Paluch
4ba82f923c Update license headers for 2021. 
Closes gh-624.
 2021-02-16 15:18:37 +01:00
Mark Paluch
a36454738e Polishing 
Skip build forking for Javadoc generation. Upgrade to next doc resources.
 2020-12-10 11:58:21 +01:00
Mark Paluch
834bedaa87 Post-release cleanups 
Maven Deploy plugin 3.0 M1 doesn't resolve properly alt repositories so rolling back to 2.8.2
 2020-12-10 11:50:11 +01:00
Mark Paluch
b0f779dff2 [maven-release-plugin] prepare for next development iteration 2020-12-10 11:42:00 +01:00
Mark Paluch
c578a61bb8 [maven-release-plugin] prepare release 2.2.3.RELEASE 2020-12-10 11:41:59 +01:00
Mark Paluch
778be7e6f2 Upgrade dependencies 
* HttpClient 4.5.13
* HttpCore 4.4.14
* Jetty Reactive Httpclient 1.1.4
* Jackson Databind 2.11.3
* AWS SDK 1.11.916
* Google API Services v1-rev20201112-1.30.10
* BouncyCastle 1.67
* AssertJ 3.18.1
* JUnit 5.7.0
* Kotlin 1.3.71
* Kotlin Coroutines 1.3.9
* Mockito 3.6.28
* Spring Framework 5.2.12
* Spring Data Moore SR12
* Spring Security 5.2.8
* Reactor Dysprosium SR15

Closes gh-606
 2020-12-10 11:28:02 +01:00
Mark Paluch
7951ec2872 Update changelog 
See gh-605
 2020-12-10 11:04:02 +01:00
Mark Paluch
71730d494b Skip secret rotation for non-renewable leases with zero TTL 
We now skip secret rotation for secrets that have a zero TTL, typically kv1/kv2 secrets that don't have a TTL configured to avoid excessive Vault calls.

Closes gh-601.
See also spring-cloud/spring-cloud-vault#391
 2020-12-02 14:20:59 +01:00
Mark Paluch
02adcd137b Polishing 
Add whitespace to exception message
 2020-12-02 13:59:09 +01:00
Mark Paluch
494d11d91f Eagerly initialize Netty4ClientHttpRequestFactory 
Avoid a null SSLContext.

Closes gh-597
 2020-12-01 17:49:38 +01:00
Mark Paluch
740ac04028 Polishing 
Add author tag.

Closes gh-599.
 2020-12-01 17:20:31 +01:00
Iouri Goussev
785eeef846 Logger is not passed required parameter 
We should either not log the token and remove %s or log the token.

Original pull request: gh-599.
 2020-12-01 17:20:31 +01:00
Mark Paluch
9111891372 Reformat readme 
See gh-591.
 2020-12-01 17:01:39 +01:00
adeinega
dc17c5681f Polishing 
Original pull request: gh-591.
 2020-12-01 17:01:38 +01:00
Mark Paluch
2b23c2e28a Remove all newlines in PKCS7 from EC2MetaData. 
Closes gh-571.
 2020-08-31 14:13:38 +02:00
Mark Paluch
bdc2e79288 Deprecate Policy.BuiltinCapabilities.WRITE 
Deprecate constant as it is deprecated since Vault 0.5.

Closes gh-575.
 2020-08-11 12:16:17 +02:00
Mark Paluch
c38d18a1d6 Polishing 
See gh-563.
 2020-05-28 10:26:09 +02:00
Mark Paluch
fb9fcac30d Integrate spring-javaformat 
Closes gh-564.
 2020-05-28 10:18:56 +02:00
maaaace
dba4a3facd Fix download vault script for arm64 processor 
install_vault.sh just download and unzip binary vault for amd64, which cannot be executed
on arm64 architecture processors. Add architecture checking in bash script to support this.

Signed-off-by: maaaace <fuheming@huawei.com>
Original pull request: spring-cloud/spring-cloud-vault#402.
Closes gh-562.
 2020-05-19 17:23:06 +02:00
Mark Paluch
86318b8adf Polishing 
Fix Javadoc typos
 2020-05-19 16:24:27 +02:00
Mark Paluch
e0464cb2f7 Gracefully return null if PKI CRL is absent. 
VaultPkiOperations.getCrl(…) now returns null if Vault responds (with status 204) that the CRL is absent.

Closes gh-556.
 2020-05-19 14:20:29 +02:00
Mark Paluch
795300cfac Add ClientCertificateAuthenticationOptions. 
We now provide ClientCertificateAuthentication to configure the auth mount path.

Closes gh-557.
 2020-05-19 14:02:33 +02:00
Mark Paluch
e0d30266c8 Upgrade dependencies. 
* httpclient 4.5.11 -> 4.5.12
* jetty-reactive-httpclient 1.0.3 -> 1.1.2
* netty 4.1.45.Final -> 4.1.50.Final
* okhttp3 3.14.6 -> 3.14.9
* jackson-databind 2.10.2 -> 2.11.0
* aws-java-sdk 1.11.730 -> 1.11.785
* google-api-services-iam v1-rev20200131-1.30.8 -> v1-rev20200221-1.30.9
* bcpkix-jdk15on 1.64 -> 1.65
* assertj-core 3.15.0 -> 3.16.1
* JUnit 5.6.0 -> 5.6.2
* mockk 1.9.3 -> 1.10.0
* Mockito 3.3.0 -> 3.3.3
* Spring Framework 5.2.5.RELEASE -> 5.2.6.RELEASE
* Spring Data Moore SR5 -> Moore SR7
* Spring Security 5.2.2.RELEASE -> 5.2.3.RELEASE
* Reactor Dysprosium SR5 -> Dysprosium SR7

Closes gh-560
 2020-05-19 12:19:04 +02:00
Mark Paluch
8cf32c6fa2 Polishing. 
Consistently use key name, ciphertext and plaintext in assert messages.

See gh-550
Closes gh-551
Original pull request: gh-551
 2020-04-29 11:28:46 +02:00
MLSTRM
ebaa180aec Correct assertion message in decrypt. 
Closes gh-550
Original pull request: gh-551
 2020-04-29 11:27:56 +02:00
Mark Paluch
3d8502fce3 Upgrade to Spring Doc resources 0.2.2.RELEASE. 
Closes gh-553.
 2020-04-29 11:22:58 +02:00
Mark Paluch
573d99dbbe Polishing. 
Explicitly set Javadoc locale to English. Add missing anchors in reference documentation.

See gh-549.
 2020-04-08 12:05:31 +02:00
Mark Paluch
a4c0eab83f Upgrade to Spring Doc Resources 0.2.0. 
Closes gh-549.
 2020-04-08 12:03:07 +02:00
Mark Paluch
8019b5a65d Upgrade to Spring Framework 5.2.5. 
Closes gh-547
 2020-04-02 14:43:34 +02:00
Mark Paluch
5be0fa2868 Retrieve beans from BeanFactory instead of calling local configuration class bean methods. 
We now lookup beans from the BeanFactory instead of expecting a proxied arrangement of configuration class bean methods which allows using @Configuration(proxyBeanMethods = false).

Closes gh-546.
 2020-03-30 15:22:48 +02:00
Mark Paluch
5c661c9d47 Polishing. 
Remove SpringNext build profile from TravisCI.
 2020-03-10 10:42:51 +01:00
Mark Paluch
50d1cc825c Polishing. 
Strip -uri from property names to align with naming scheme. Simplify property retrieval. Reduce test to unit test. Update documentation.

Closes gh-542.
 2020-03-10 10:40:56 +01:00
justin.bertrand
b284c4a029 Expanding EnvironmentVaultConfiguration for AzureMSIAuthentication identity service configuration 
Added missing configuration unit tests for AzureMSI.

Original pull request: gh-542.
 2020-03-10 10:40:56 +01:00
Mark Paluch
40b3c499e8 [maven-release-plugin] prepare for next development iteration 2020-02-26 13:48:56 +01:00
Mark Paluch
0098cec299 [maven-release-plugin] prepare release 2.2.2.RELEASE 2020-02-26 13:48:56 +01:00
Mark Paluch
68afcba95b Update changelog 
See gh-540
 2020-02-26 13:47:46 +01:00
Mark Paluch
dc77e4e064 Upgrade to Spring Data Moore SR5. 
Closes gh-539.
 2020-02-26 11:58:53 +01:00
Mark Paluch
4dfab6e3f3 Upgrade to Spring Framework 5.2.4. 
Closes gh-535.
 2020-02-26 10:32:47 +01:00
Mark Paluch
f172895011 Upgrade dependencies 
* httpclient 4.5.10 -> 4.5.11
* Netty 4.1.44.Final -> 4.1.45.Final
* AWS Java SDK 1.11.706 -> 1.11.730
* google-api-services-iam v1-rev20191115-1.30.3 -> v1-rev20200131-1.30.8
* AssertJ 3.13.2 -> 3.15.0
* JUnit 5.5.2 -> 5.6.0
* Kotlin Coroutines 1.3.2 -> 1.3.3
* Mockito 3.0.0 -> 3.3.0
* Spring Security 5.2.1.RELEASE -> 5.2.2.RELEASE

Closes gh-538.
 2020-02-26 10:30:43 +01:00
Mark Paluch
752501e903 Omit Vault namespace header for sys/init and sys/health endpoints 
We now no longer add the default namespace header when issuing requests to opsForSys().init()/health().

Closes gh-534.
 2020-02-13 09:23:14 +01:00
Mark Paluch
a20867b638 Polishing 
Move AppRole-related utility methods to AppRoleAuthentication. Create dedicated methods for role-id and secret-id path computations.

Tweak docs.

Original pull request: gh-533.
 2020-01-31 11:18:39 +01:00
Oleg Lopatin
4005ea46e6 Avoid auth mount path escaping 
If one wants it being escaped, it could be done in advance in the configuration.

Original pull request: gh-533.
Closes gh-532.
 2020-01-31 11:18:39 +01:00
Mark Paluch
65c29a5efd Post release cleanups 
See gh-529
 2020-01-16 09:13:06 +01:00