327 Commits

Author SHA1 Message Date
Mark Paluch
3a2721a13e Consider absent secretId in AppRole authentication steps.
We now skip secretId retrieval when using AppRole authentication steps to avoid Unknown SecretId configuration errors.

Also, renamed AbsentSecretId.INSTANCE to ABSENT_SECRET_ID to cause more meaningful messages when used in toString.

Closes gh-656
2021-06-18 09:52:24 +02:00
Willi Schönborn
fd2feffcf0 Bumped Azure Instance Metadata API version to 2017-12-01.
vmScaleSetName is only exposed in 2017-12-01 and later.
See https://docs.microsoft.com/en-us/azure/virtual-machines/linux/instance-metadata-service\?tabs\=windows\#response-1

Closes gh-644
2021-06-11 09:42:48 +02:00
Bun-Ny TAN
50213bd9ba Fix assertion message.
See gh-649
2021-06-11 09:38:55 +02:00
Mark Paluch
4ba82f923c Update license headers for 2021.
Closes gh-624.
2021-02-16 15:18:37 +01:00
Mark Paluch
b0f779dff2 [maven-release-plugin] prepare for next development iteration 2020-12-10 11:42:00 +01:00
Mark Paluch
c578a61bb8 [maven-release-plugin] prepare release 2.2.3.RELEASE 2020-12-10 11:41:59 +01:00
Mark Paluch
71730d494b Skip secret rotation for non-renewable leases with zero TTL
We now skip secret rotation for secrets that have a zero TTL, typically kv1/kv2 secrets that don't have a TTL configured to avoid excessive Vault calls.

Closes gh-601.
See also spring-cloud/spring-cloud-vault#391
2020-12-02 14:20:59 +01:00
Mark Paluch
02adcd137b Polishing
Add whitespace to exception message
2020-12-02 13:59:09 +01:00
Mark Paluch
494d11d91f Eagerly initialize Netty4ClientHttpRequestFactory
Avoid a null SSLContext.

Closes gh-597
2020-12-01 17:49:38 +01:00
Mark Paluch
740ac04028 Polishing
Add author tag.

Closes gh-599.
2020-12-01 17:20:31 +01:00
Iouri Goussev
785eeef846 Logger is not passed required parameter
We should either not log the token and remove %s or log the token.

Original pull request: gh-599.
2020-12-01 17:20:31 +01:00
Mark Paluch
2b23c2e28a Remove all newlines in PKCS7 from EC2MetaData.
Closes gh-571.
2020-08-31 14:13:38 +02:00
Mark Paluch
bdc2e79288 Deprecate Policy.BuiltinCapabilities.WRITE
Deprecate constant as it is deprecated since Vault 0.5.

Closes gh-575.
2020-08-11 12:16:17 +02:00
Mark Paluch
fb9fcac30d Integrate spring-javaformat
Closes gh-564.
2020-05-28 10:18:56 +02:00
Mark Paluch
86318b8adf Polishing
Fix Javadoc typos
2020-05-19 16:24:27 +02:00
Mark Paluch
e0464cb2f7 Gracefully return null if PKI CRL is absent.
VaultPkiOperations.getCrl(…) now returns null if Vault responds (with status 204) that the CRL is absent.

Closes gh-556.
2020-05-19 14:20:29 +02:00
Mark Paluch
795300cfac Add ClientCertificateAuthenticationOptions.
We now provide ClientCertificateAuthentication to configure the auth mount path.

Closes gh-557.
2020-05-19 14:02:33 +02:00
Mark Paluch
8cf32c6fa2 Polishing.
Consistently use key name, ciphertext and plaintext in assert messages.

See gh-550
Closes gh-551
Original pull request: gh-551
2020-04-29 11:28:46 +02:00
MLSTRM
ebaa180aec Correct assertion message in decrypt.
Closes gh-550
Original pull request: gh-551
2020-04-29 11:27:56 +02:00
Mark Paluch
5be0fa2868 Retrieve beans from BeanFactory instead of calling local configuration class bean methods.
We now lookup beans from the BeanFactory instead of expecting a proxied arrangement of configuration class bean methods which allows using @Configuration(proxyBeanMethods = false).

Closes gh-546.
2020-03-30 15:22:48 +02:00
Mark Paluch
50d1cc825c Polishing.
Strip -uri from property names to align with naming scheme. Simplify property retrieval. Reduce test to unit test. Update documentation.

Closes gh-542.
2020-03-10 10:40:56 +01:00
justin.bertrand
b284c4a029 Expanding EnvironmentVaultConfiguration for AzureMSIAuthentication identity service configuration
Added missing configuration unit tests for AzureMSI.

Original pull request: gh-542.
2020-03-10 10:40:56 +01:00
Mark Paluch
40b3c499e8 [maven-release-plugin] prepare for next development iteration 2020-02-26 13:48:56 +01:00
Mark Paluch
0098cec299 [maven-release-plugin] prepare release 2.2.2.RELEASE 2020-02-26 13:48:56 +01:00
Mark Paluch
752501e903 Omit Vault namespace header for sys/init and sys/health endpoints
We now no longer add the default namespace header when issuing requests to opsForSys().init()/health().

Closes gh-534.
2020-02-13 09:23:14 +01:00
Mark Paluch
a20867b638 Polishing
Move AppRole-related utility methods to AppRoleAuthentication. Create dedicated methods for role-id and secret-id path computations.

Tweak docs.

Original pull request: gh-533.
2020-01-31 11:18:39 +01:00
Oleg Lopatin
4005ea46e6 Avoid auth mount path escaping
If one wants it being escaped, it could be done in advance in the configuration.

Original pull request: gh-533.
Closes gh-532.
2020-01-31 11:18:39 +01:00
Mark Paluch
5a25a81599 [maven-release-plugin] prepare for next development iteration 2020-01-16 09:05:48 +01:00
Mark Paluch
44b8e8fd49 [maven-release-plugin] prepare release 2.2.1.RELEASE 2020-01-16 09:05:47 +01:00
Mark Paluch
a5561573b9 Update copyright years to 2020
Closes gh-518.
2020-01-10 13:19:50 +01:00
Mark Paluch
23337c1735 Rename WebClientBuilder.requestFactory(…) to httpConnectorFactory(…)
Closes gh-517
2020-01-10 13:14:05 +01:00
Mark Paluch
da2c4aded2 Support for Vault Agent
We now support Vault Agent usage by creating VaultTemplate and ReactiveVaultTemplate without a client authentication mechanism/session manager to inherit Vault Agent's authentication.

Closes gh-515
2020-01-10 13:13:56 +01:00
Mark Paluch
61b65c2077 Polishing
Add logging for deprecated property usage. Tweak log message wording. Refactor configured property check to if-style.

Closes gh-508.
Original pull request: gh-509.
2019-12-02 10:14:40 +01:00
Raoof Mohammed
0fb7d3fe7b Migrate AWS EC2 role-id property to role in EnvironmentVaultConfiguration
Support both, role and role-id for aws-ec2 for backwards compatibility.

Fix EnvironmentVaultConfiguration documentation.

Closes gh-508.
Original pull request: gh-509.
2019-12-02 10:13:23 +01:00
Mark Paluch
1d99ad9679 Polishing
Add tests for write and delete.

Closes gh-503
Closes gh-511
2019-12-02 09:19:09 +01:00
Raoof Mohammed
a73a00f23e Propagate not found exception for write and delete of absent paths
if 404, return Mono.empty -> read/list and Mono.error -> write/delete

Closes gh-503.
2019-12-02 09:19:09 +01:00
Mark Paluch
75d887af06 Fix EnvironmentVaultConfiguration documentation.
Closes gh-510.
2019-11-26 09:51:40 +01:00
Mark Paluch
d1ab23b8b9 Polishing
Add author tags. Add documentation for path configuration.

Original pull request: gh-507.
See gh-462.
Closes gh-507.
2019-11-14 16:32:38 +01:00
Raoof Mohammed
96b035382a Support configurable custom path for auth backends in EnvironmentVaultConfiguration
Original pull request: gh-507.
Closes gh-462.
2019-11-14 16:32:38 +01:00
Mark Paluch
ec59c80538 Prepare for next development iteration
See gh-497.
2019-11-06 10:31:30 +01:00
Mark Paluch
d26aad890a [maven-release-plugin] prepare release 2.2.0.RELEASE
See gh-#497.
2019-11-06 10:12:38 +01:00
Mark Paluch
41e7051481 Consider performance standby and recovery replication in healthcheck
Closes gh-501.
2019-11-06 09:45:14 +01:00
Mark Paluch
1ffcc79389 [maven-release-plugin] prepare for next development iteration
See gh-495.
2019-10-24 11:46:36 +02:00
Mark Paluch
ceb75dd57b [maven-release-plugin] prepare release 2.2.0.RC1
See gh-495.
2019-10-24 11:46:36 +02:00
Mark Paluch
42db8e74d8 Fix AbstractVaultConfiguration javadoc.
Closes gh-486.
2019-10-21 12:33:46 +02:00
Mark Paluch
26829f5b30 Polishing.
Add author tags. Update test.

Original pull request: gh-476.
2019-09-30 14:49:14 +02:00
Alex Antonov
9e36310adb Added ability to configure uri_sans when building issue certificate request.
Original pull request: gh-476.
2019-09-30 14:49:14 +02:00
Mark Paluch
5214ca174e Fix Javadoc warnings.
Closes gh-475.
2019-09-30 14:40:24 +02:00
Mark Paluch
9a63401d68 Upgrade to Spring Framework 5.2 GA.
Closes gh-482.
2019-09-30 13:48:50 +02:00
Sébastien Deleuze
a2ebbf03cc Upgrade to Kotlin Coroutines 1.3.2.
Original pull request: gh-479.
2019-09-30 13:45:53 +02:00