Spring/spring-vault
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
637 Commits 13 Branches 0 Tags
27dc7c038dede39dcd28816e64ae569bdb2df8b9
Commit Graph

198 Commits

Author SHA1 Message Date
Mark Paluch
27dc7c038d Prepare next development iteration 
See gh-608
 2020-12-22 10:10:34 +01:00
Mark Paluch
d1f1c95455 Update changelog 
See gh-608
 2020-12-22 09:23:50 +01:00
Mark Paluch
b3e28c89de Upgrade to Vault 1.6.1 
Closes gh-610
 2020-12-22 09:16:52 +01:00
Mark Paluch
c0a8a305ec Upgrade dependencies 
* HttpClient 4.5.13
* HttpCore 4.4.14
* Jetty Reactive Httpclient 1.1.4
* Jackson Databind 2.12.0
* AWS SDK 1.11.916
* Google API Services v1-rev20201112-1.31.0
* Google Oauth 0.22.1
* BouncyCastle 1.67
* AssertJ 3.18.1
* JUnit 5.7.0
* Kotlin 1.4.21
* Kotlin Coroutines 1.4.2
* Mockito 3.6.28
* Spring Framework 5.3.2
* Spring Data 2020.0.2
* Spring Security 5.4.2
* Reactor Dysprosium 2020.0.2

Closes gh-607
 2020-12-10 11:36:21 +01:00
Mark Paluch
49d78f6b76 Update to Vault 1.6 
Closes gh-604
 2020-12-10 10:57:09 +01:00
Mark Paluch
4783e24dfe Update changelog 
See gh-603
 2020-12-10 10:52:19 +01:00
Mark Paluch
ff57fe73d2 Publish single rotated on secrets rotation for atomic propertysource updates 
We now publish a single SecretLeaseRotatedEvent instead of publishing two events (SecretLeaseExpiredEvent and SecretLeaseCreatedEvent) to atomically update notify listeners such as LeaseAwareVaultPropertySource for atomic updates.

Closes gh-594.
 2020-12-02 12:02:20 +01:00
Mark Paluch
672fb86260 Extend AuthenticationStepsOperator for non-blocking resource access 
AuthenticationStepsOperator now uses DataBufferUtils to load credentials from a Resource for Suppliers that are instance of ResourceCredentialSupplier. Generic suppliers are called on the boundedElastic Scheduler to offload potentially blocking calls to a different thread.

Resolves gh-586.
 2020-09-24 10:40:56 +02:00
Mark Paluch
a6435b5f93 [maven-release-plugin] prepare for next development iteration 
See gh-582
 2020-09-15 16:30:55 +02:00
Mark Paluch
0606663ebe [maven-release-plugin] prepare release 2.3.0-M1 
See gh-582
 2020-09-15 16:30:55 +02:00
Mark Paluch
03234ac3d9 Update changelog 
See gh-582.
 2020-09-15 16:20:04 +02:00
Mark Paluch
1dec9f542d Incorporate review feedback 
See gh-574.
 2020-09-15 09:52:35 +02:00
Mark Paluch
e1def38217 Add documentation for KeyValue, PKI, Token, and Transit backend usage 
Resolves gh-574.
 2020-09-15 09:52:31 +02:00
Mark Paluch
81094fca7f Polishing 
Add author tags. Return generated tweak from encode and batch encode methods. Switch simple encode/decode methods to default interface methods.

Introduce VaultTransformContext.isEmpty() method to check if the context is empty.

Align equals/hashCode methods with Spring style. Reformat code.

Resolves gh-570.
 2020-09-07 15:29:23 +02:00
Mark Paluch
0ef42a1497 Upgrade to Vault 1.5.3. 
See gh-543.
 2020-08-31 13:46:41 +02:00
Mark Paluch
6413a20c7e Polishing 
Reformat sources from space indents to tabs. Introduce DurationParser to represent java.time.Duration using Go's Duration format. Reduce visibility of implementation to package level. Simplify code. Update tests to work with rerunning tests.

Reorder methods. Add license headers.

Original pull request: gh-561.
Resolves gh-432.
 2020-05-28 09:13:44 +02:00
maaaace
b9bb58472c Fix download vault script for arm64 processor 
install_vault.sh just download and unzip binary vault for amd64, which cannot be executed
on arm64 architecture processors. Add architecture checking in bash script to support this.

Signed-off-by: maaaace <fuheming@huawei.com>
Original pull request: spring-cloud/spring-cloud-vault#402.
Closes gh-562.
 2020-05-19 17:22:46 +02:00
Mark Paluch
3b4e902c2f Introduce ReactiveVaultEndpointProvider. 
We now provide a reactive variant of VaultEndpointProvider to allow for non-blocking lookup of VaultEndpoint.

Closes gh-555.
 2020-05-19 16:24:42 +02:00
Mark Paluch
7dc00613e2 Add ClientCertificateAuthenticationOptions. 
We now provide ClientCertificateAuthentication to configure the auth mount path.

Closes gh-557.
 2020-05-19 14:02:41 +02:00
Mark Paluch
2c237b71d2 Switch to new versioning scheme. 
Closes gh-558.
 2020-05-19 11:51:35 +02:00
Mark Paluch
c46e5995ab Polishing. 
Explicitly set Javadoc locale to English. Add missing anchors in reference documentation.

See gh-549.
 2020-04-08 12:08:44 +02:00
Mark Paluch
4fe87aec43 Accept PEM-encoded certificates in SslConfiguration. 
We now accept PEM-encoded certificates when configuring SSL settings.

KeyStoreConfiguration keystore = KeyStoreConfiguration
        .of(new ClassPathResource("ca.pem")).withStoreType("PEM");
SslConfiguration configuration = SslConfiguration.forTrustStore(keystore);

Closes gh-514.
 2020-03-25 16:42:33 +01:00
Daniel Franco
8b6f12f9db Upgrade Vault version to 1.3.4. 
Original pull request: gh-545.
 2020-03-25 09:19:56 +01:00
Mark Paluch
dc4ad5bf35 Polishing. 
Strip -uri from property names to align with naming scheme. Simplify property retrieval. Reduce test to unit test. Update documentation.

Closes gh-542.
 2020-03-10 10:40:50 +01:00
Mark Paluch
f13bfdcf13 Polishing 
Move AppRole-related utility methods to AppRoleAuthentication. Create dedicated methods for role-id and secret-id path computations.

Tweak docs.

Original pull request: gh-533.
 2020-01-31 11:18:30 +01:00
Oleg Lopatin
ac38b83b4c Avoid auth mount path escaping 
If one wants it being escaped, it could be done in advance in the configuration.

Original pull request: gh-533.
Closes gh-532.
 2020-01-31 11:18:27 +01:00
Mark Paluch
71e6351256 Update copyright years to 2020 
See gh-518.
 2020-01-31 11:16:47 +01:00
Daniel Franco
d9489e0c02 Upgrade to Vault 1.3.2 
Original pull request: gh-531.
 2020-01-31 10:58:37 +01:00
Mark Paluch
e3444a4f86 Support for Vault Agent 
We now support Vault Agent usage by creating VaultTemplate and ReactiveVaultTemplate without a client authentication mechanism/session manager to inherit Vault Agent's authentication.

Closes gh-515
 2020-01-10 13:14:35 +01:00
Daniel Franco
1647e763b2 #516 - Update vault version to 1.3.1. 
Also, upgrade to most recent patch increments.
 2020-01-10 11:54:28 +01:00
Mark Paluch
a3c5dd8f1a Polishing 
Add logging for deprecated property usage. Tweak log message wording. Refactor configured property check to if-style.

Closes gh-508.
Original pull request: gh-509.
 2019-12-02 10:14:54 +01:00
Raoof Mohammed
7fa31da4de Migrate AWS EC2 role-id property to role in EnvironmentVaultConfiguration 
Support both, role and role-id for aws-ec2 for backwards compatibility.

Fix EnvironmentVaultConfiguration documentation.

Closes gh-508.
Original pull request: gh-509.
 2019-12-02 10:10:24 +01:00
Mark Paluch
841c79b01b Fix EnvironmentVaultConfiguration documentation. 
Closes gh-510.
 2019-11-26 09:51:47 +01:00
Brian Demers
8c97561787 Use curl instead of wget in install_vault.sh. 
curl is installed by default on many systems

Original pull request: gh-505.
 2019-11-11 14:00:33 +01:00
Mark Paluch
bd2341aec1 [maven-release-plugin] prepare for next development iteration 
See gh-#497.
 2019-11-06 10:12:46 +01:00
Mark Paluch
d26aad890a [maven-release-plugin] prepare release 2.2.0.RELEASE 
See gh-#497.
 2019-11-06 10:12:38 +01:00
Mark Paluch
0587d89b11 Upgrade dependencies. 
* netty 4.1.42.Final -> 4.1.43.Final
* Spring Framework 5.2.0 -> 5.2.1
* Spring Data Moore GA -> Moore SR1
* Reactor Dysprosium GA -> Dysprosium SR1

Closes gh-502
 2019-11-06 10:08:51 +01:00
Mark Paluch
4056d9fb88 Update changelog. 
See gh-497.
 2019-11-06 10:01:23 +01:00
Mark Paluch
ddf6dc513b Update changelog. 
See gh-495.
 2019-10-24 11:46:36 +02:00
Daniel Franco
9751e5b366 Upgrade Vault to 1.2.3. 
See https://github.com/hashicorp/vault/blob/v1.2.3/CHANGELOG.md

Original pull request: gh-485.
 2019-09-30 14:44:22 +02:00
Mark Paluch
7166f470fb Polishing. 
Increase certification validity.

See gh-481
 2019-09-30 13:42:52 +02:00
Mark Paluch
de3e3e2d2e Update changelog. 
See gh-473.
 2019-09-12 14:31:54 +02:00
Mark Paluch
d642b32744 Add Kotlin Coroutines extensions for ReactiveVaultOperations. 
Closes gh-472.
 2019-09-12 10:09:34 +02:00
Mark Paluch
35079a54bb Switch to sys/wrapping endpoints for response unwrapping. 
Cubbyhole and wrapped AppRole authentications now use sys/wrapping endpoints to unwrap responses by default. Both authentication mechanisms can be configured with UnwrappingEndpoints to switch back to cubbyhole.

Closes gh-163.
 2019-09-09 13:16:09 +02:00
Mark Paluch
fac92ded6a Add integration tests for Vault's namespace support. 
Closes gh-465.
 2019-09-09 11:29:27 +02:00
Mark Paluch
f5a969bc27 Add support for PCF authentication. 
We now support PCF authentication leveraging PCF's App and Container Identity Assurance.

Instance certificate and key default to CF_INSTANCE_CERT respective CF_INSTANCE_KEY environment variables.

PcfAuthenticationOptions options = PcfAuthenticationOptions.builder().role(…).build();
PcfAuthentication authentication = new PcfAuthentication(options, restOperations);

VaultToken token = authentication.login();

PcfAuthentication requires BouncyCastle for RSA-PSS signing.

Update KubernetesJwtSupplier and KubernetesServiceAccountTokenFile to inherit from generic Resource-based credential suppliers.

Closes gh-440.
 2019-09-05 11:38:30 +02:00
Daniel Franco
ba7fd9b8b4 Upgrade Vault to 1.2.2. 
See https://github.com/hashicorp/vault/blob/v1.2.2/CHANGELOG.md

Original pull request: #461.
 2019-09-02 09:40:06 +02:00
Daniel Franco
e3960509ef Upgrade Vault to 1.2.1 
See https://github.com/hashicorp/vault/blob/v1.2.1/CHANGELOG.md

Original pull request: gh-460.
 2019-08-14 09:41:52 +02:00
Mark Paluch
1dcc1427d0 Improve wording on wire logging exposure of plaintext traffic. 
See gh-451.
 2019-08-01 13:10:35 +02:00
Mark Paluch
256212a959 Deprecate App ID authentication mechanism. 
Closes gh-453.
 2019-08-01 11:18:19 +02:00