Spring/spring-vault
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
697 Commits 13 Branches 0 Tags
2.3.x
Commit Graph

697 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Mark Paluch
3650ec65f9 Prepare next development iteration. 
See gh-804
 2023-07-17 14:22:27 +02:00
Mark Paluch
4ec74cfe6f Release Spring Vault 2.3.4. 
Closes gh-804
 2023-07-17 14:21:34 +02:00
Mark Paluch
f431354216 Upgrade dependencies. 
See gh-804
 2023-07-17 14:17:05 +02:00
Mark Paluch
2c51c02cf9 Fix link to LoginToken Javadoc. 
Closes gh-788
 2023-06-19 11:55:19 +02:00
Iurii Rychkov
fb1994c085 Fix typos in vault-repositories.adoc. 
Resolves gh-795
 2023-06-19 10:42:12 +02:00
Mark Paluch
5936bfd833 Polishing. 
Rename consistently role option. Add since and author tags.

Closes gh-780
 2023-04-19 08:33:01 +02:00
Andy Lintner
4a60c1c79c Role name can now be used with cert auth. 
When using TLS authentication, the Vault API allows the caller to specify
a role to use for authorization. Previously, we did not allow this to be
specified, which caused Vault to select one of the roles associated with
the certificate.

 See gh-780
 2023-04-19 08:32:56 +02:00
Mark Paluch
37343099fb Update GPG pin entry mode. 
See gh-774
 2023-03-20 16:57:12 +01:00
Mark Paluch
49523ce3e7 Prepare next development iteration. 
See gh-774
 2023-03-20 16:43:39 +01:00
Mark Paluch
a3d948c0e1 Release Spring Vault 2.3.3. 
Closes gh-774
 2023-03-20 16:42:41 +01:00
Mark Paluch
337c3a6be7 Upgrade dependencies. 
See gh-774
 2023-03-20 16:41:17 +01:00
Mark Paluch
41d3385f6f Upgrade to Project Reactor 2020.0.30. 
Closes gh-773
 2023-03-20 15:17:17 +01:00
Mark Paluch
2171541e9d Upgrade to Spring Data 2020.0.15. 
Closes gh-772
 2023-03-20 15:16:21 +01:00
Mark Paluch
fb9e2ee65c Upgrade to Spring Framework 5.3.26. 
Closes gh-771
 2023-03-20 15:15:12 +01:00
Mark Paluch
480a295a2c Refine logging on revocation failures. 
We now log token accessors if a token revocation has failed.

Closes gh-766
 2023-03-20 13:12:13 +01:00
Mark Paluch
aeaf571d2d Consistently attach cause to exceptions. 
Closes gh-713
 2023-03-17 10:26:26 +01:00
Mark Paluch
73af38127e Fix artifactory deployment. 2023-03-07 16:09:25 +01:00
Mark Paluch
780b864394 Polishing. 
Add missing executable flag.
 2023-03-07 15:51:44 +01:00
Mark Paluch
c792c6d5d4 Allow reuse of library-specific configuration code in ClientHttpRequestFactoryFactory and ClientHttpConnectorFactory. 
See gh-760
 2023-03-07 15:46:15 +01:00
Mark Paluch
5f2857901c Do not revoke batch tokens. 
We now track the token type and no longer attempt revoking batch tokens.
Also, refactor code duplicates to use LoginTokenUtil.

Closes gh-764
 2023-03-07 15:40:57 +01:00
Mark Paluch
4de0ac626a Update tests to skip newer PEM versions 2023-03-07 15:34:31 +01:00
Mark Paluch
ee4a0ed46c Add Jenkins config 
See gh-719.
 2023-03-07 15:30:18 +01:00
Mark Paluch
48c1ec76aa Update license headers for 2022. 
Closes gh-679
 2022-01-05 09:48:37 +01:00
Scott Strang
a56339eba8 Upgrade to Netty 4.1.70.Final 
Update netty version to 4.1.70.Final to address security vulnerabilities

Original pull request: gh-670.
 2021-11-25 10:24:16 +01:00
Mark Paluch
6c08ff32bf Consider LeaseStrategy outcome whether to retry session token renewal. 
LeaseStrategy.shouldDrop(…) now controls whether to retry the session token. Dropping the token terminates renewals while retaining the token leads to another renewal. Additionally, we introduced LeaseStrategy.retainOnIoError() to retain tokens on network failures (IOException).

Closes gh-646
 2021-11-19 11:53:47 +01:00
Mark Paluch
306f2d8279 Polishing. 
Move off deprecated Reactor Netty API.

See gh-654
 2021-11-19 11:11:14 +01:00
Mark Paluch
53d48aecc0 Enable System Properties-driven proxy configuration for Reactor Netty. 
Also, upgrade to newest Reactor Netty.

Closes gh-654
 2021-11-19 11:11:14 +01:00
fivesmallq
fb6e630649 Fix typos in KubernetesAuthentication. 
Closes gh-669
 2021-11-19 09:57:30 +01:00
country
2f7f51398c Add anchors in reference documentation. 
See gh-655
 2021-10-01 14:29:55 +02:00
Nikola Kološnjaji
7d408e1c96 Fix typos in GcpIamAuthenticationOptions and GcpIamCredentialsAuthenticationOptions. 
See gh-657
 2021-10-01 14:28:45 +02:00
Mark Paluch
a3e9c0c3f0 Enable authentication steps for AzureMsiAuthentication for reactive usage. 
Closes gh-665.
 2021-09-27 15:44:32 +02:00
Mark Paluch
2fd0a884fc Consider absent secretId in AppRole authentication steps. 
We now skip secretId retrieval when using AppRole authentication steps to avoid Unknown SecretId configuration errors.

Also, renamed AbsentSecretId.INSTANCE to ABSENT_SECRET_ID to cause more meaningful messages when used in toString.

Closes gh-656
 2021-06-18 09:52:21 +02:00
Mark Paluch
0a935e1b9e Expose CA chain through CertificateBundle. 
We now expose access to the CA chain by providing getX509IssuerCertificates(). Additionally, a KeyStore can be created containing the full CA chain.

Closes gh-648.
 2021-06-11 11:07:31 +02:00
Willi Schönborn
9fef7ef9aa Bumped Azure Instance Metadata API version to 2017-12-01. 
vmScaleSetName is only exposed in 2017-12-01 and later.
See https://docs.microsoft.com/en-us/azure/virtual-machines/linux/instance-metadata-service\?tabs\=windows\#response-1

Closes gh-644
 2021-06-11 09:49:55 +02:00
Bun-Ny TAN
4be649ca82 Fix assertion message. 
See gh-649
 2021-06-11 09:49:53 +02:00
Mark Paluch
a5a8fa2745 [maven-release-plugin] prepare for next development iteration 2021-03-16 11:12:38 +01:00
Mark Paluch
2c1577c0ef [maven-release-plugin] prepare release 2.3.2 2021-03-16 11:12:38 +01:00
Mark Paluch
d5d3135bab Update changelog. 
See gh-643.
 2021-03-16 11:11:15 +01:00
Mark Paluch
a2888aeea7 Upgrade dependencies. 
jetty-reactive-httpclient 1.1.6, netty 4.1.60.Final, Jackson Databind 2.12.1, AWS Java SDK 1.11.975, google-cloud-iamcredentials 1.2.2, Google API Services v1-rev20210226-1.31.0, AssertJ 3.19.0, JUnit 5.7.1, Kotlin 1.4.31, Mockito 3.8.0, Spring Framework 5.3.5, Spring Data 2020.0.5, Spring Security 5.4.5, Reactor 2020.0.5

Closes gh-642.
 2021-03-16 11:01:04 +01:00
Mark Paluch
06714906db Guard tests against versions not supporting versioned k/v backend. 2021-03-16 10:51:11 +01:00
Mark Paluch
5640cc0e66 Polishing. 
Make SslConfiguration.enabledProtocols and enabledCipherSuites non-null. Update since tags. Add author tags. Update documentation.

See gh-635
Original pull request: gh-640.
 2021-03-16 10:43:39 +01:00
Ryan Gow
a85fa86535 Add ability to configure client TLS enabled protocol versions and cipher suites via Spring properties. 
- Adding the ability to explicitly configure the enabled SSL protocol
versions and cipher suites used by the Vault HTTP client via the
following Spring properties:

* vault.ssl.enabled-protocols
* vault.ssl.enabled-cipher-suites

- Properties should be a comma-separated list of String constants that
correspond to those used by the enabled SSL provider.

Closes gh-635
Original pull request: gh-640.
 2021-03-16 10:42:22 +01:00
Mark Paluch
69ba330511 Update Sonatype endpoint. 
Closes gh-641.
 2021-03-16 10:07:03 +01:00
Mark Paluch
f1e741c017 Allow external injection of Loggers into SecretLeaseContainer and PropertySources. 
Several types are now enabled for reflective injection of the Logger to allow logger re-routing if needed. Especially for Spring Cloud Vault we reconfigure loggers so that components can log their failures during the bootstrap phase while the actual logging framework is not yet configured.

Closes gh-636.
 2021-03-10 15:14:41 +01:00
Mark Paluch
e0bea23965 Polishing. 
Rename GoogleCloudIamAuthenticationOptionsBuilder to GcpIamCredentialsAuthenticationOptionsBuilder.

See gh-600.
 2021-03-10 11:27:04 +01:00
Mark Paluch
6053d752e8 Upgrade dependencies. 
Jetty Reactive HTTP Client 1.1.5, Jackson 2.12.1, AWS Java SDK 1.11.958, BouncyCastle 1.68, Netty 4.1.59.Final.

Closes gh-632.
 2021-02-19 14:31:22 +01:00
Mark Paluch
63f7f4a988 Polishing. 
Update documentation, extract base class for GCP IAM authentication options.

Closes gh-600.
Original pull request: gh-619.
 2021-02-19 14:31:22 +01:00
Andreas Gebauer
53f14ab81b Add support for GCP IAM credentials API. 
We now support the IAM Credentials API in addition to the deprecated IAM API for signing JWT.

Closes gh-600.
Original pull request: gh-619.
 2021-02-19 14:31:22 +01:00
Mark Paluch
5ad15086c5 [maven-release-plugin] prepare for next development iteration 2021-02-16 16:04:07 +01:00
Mark Paluch
114ccc4244 [maven-release-plugin] prepare release 2.3.1 2021-02-16 16:04:07 +01:00