Spring/spring-vault
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
292 Commits 13 Branches 0 Tags
52caecb171febd9507b178cedfab50003ccd3af6
Commit Graph

292 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Mark Paluch
52caecb171 Bind Kubernetes to fixed versions to avoid instabilities 2018-04-11 15:04:22 +02:00
Mark Paluch
746958d187 Upgrade to Vault 0.10.0. 
Closes gh-240.
 2018-04-11 14:54:34 +02:00
Mark Paluch
89bea444ea Post-release cleanups. 
See gh-229.
 2018-04-05 10:32:13 +02:00
Mark Paluch
3bfed52adc [maven-release-plugin] prepare for next development iteration 
See gh-229.
 2018-04-04 17:46:21 +02:00
Mark Paluch
c725dcff33 [maven-release-plugin] prepare release 2.0.1.RELEASE 
See gh-229.
 2018-04-04 17:45:39 +02:00
Mark Paluch
b024ebf495 Update changelog. 
See gh-229.
 2018-04-04 17:42:26 +02:00
Mark Paluch
388e21053b Upgrade to AWS Java SDK 1.11.308. 
Closes gh-237.
 2018-04-04 17:34:14 +02:00
Mark Paluch
537a2d921a Upgrade to Spring Security 5.0.3. 
Closes gh-236.
 2018-04-04 17:32:36 +02:00
Mark Paluch
a801e11753 Upgrade to Spring Data Kay SR6. 
Closes gh-235.
 2018-04-04 17:31:30 +02:00
Mark Paluch
353349f553 Upgrade to Jackson 2.9.5. 
Closes gh-234.
 2018-04-04 14:10:50 +02:00
Mark Paluch
d5e5438c47 Upgrade to netty 4.1.22.Final. 
Closes gh-232.
 2018-04-04 14:09:26 +02:00
Mark Paluch
e878d7de61 Upgrade to Spring Framework 5.0.5.RELEASE. 
Closes gh-227.
 2018-04-04 08:59:14 +02:00
Mark Paluch
ffd2536509 Polishing. 
Add author tags. Extract actual VaultDecryptionResult construction based on results in own method. Introduce Plaintext.empty() factory method. Guard Ciphertext.with(…) against null values.

See also gh-223.
Original pull request: gh-225.
 2018-03-21 15:26:35 +01:00
Mikko Koli
8ebd492db6 Allow empty plaintext for transit decryption. 
Fixes gh-223.
Original pull request: gh-225.
 2018-03-21 15:26:35 +01:00
Mark Paluch
bef6576c00 Guard tests against versions that do not support empty plaintext. 
See gh-223.
 2018-03-20 15:57:48 +01:00
Mark Paluch
a6807c09c3 Allow empty plaintext for transit encryption. 
We now allow construction and encryption of empty Plaintext objects. Empty plaintext can make sense from a security perspective.

Closes gh-223.
 2018-03-20 13:03:31 +01:00
Mark Paluch
61c1657743 Rotate non-renewable leases. 
We now support rotation of non-renewable leases in the sense that we expire the lease first and then obtain secrets from Vault again. Previously, non-renewable secrets were not rotated at all as rotation was tied to the renewal only and without renewal there was no rotation.

See gh-215.
 2018-03-20 12:50:47 +01:00
Mark Paluch
60d9534c9c Drop VaultToken on infrastructure errors during renewal. 
We now drop the VaultToken if an infrastructure error (connection refused/connection timeout/read timeout/…) occurs. Dropping the token prevents usage of an expired token.

Closes gh-222.
 2018-03-20 11:45:23 +01:00
Mark Paluch
b6a96451f4 Upgrade to Reactor Bismuth SR7. 
Closes gh-214.
 2018-03-07 09:00:31 +01:00
Mark Paluch
db29b39b7b Upgrade to Spring Data Kay SR5. 
Closes gh-213.
 2018-03-07 09:00:31 +01:00
Mark Paluch
972e77556d Upgrade to Vault 0.9.5. 
Reduce build matrix by removal of intermediate Vault versions.

Closes gh-212.
 2018-03-07 09:00:31 +01:00
Mark Paluch
7d6a5c0d0c Do not prepend slash to URIs with a scheme. 
See gh-206.
 2018-03-05 16:10:03 +01:00
Michael Bell
b72ed92729 Fix Javadoc example code in SecretLeaseContainer. 
Original pull request: gh-209.
Closes gh-207.
 2018-03-05 08:57:23 +01:00
Mark Paluch
aeb3f65a4c Annotate functional interfaces with FunctionalInterface. 
Closes gh-204.
 2018-02-28 14:52:12 +01:00
Mark Paluch
30a2e13b6a Polishing. 
See gh-202.
 2018-02-28 14:37:18 +01:00
Mark Paluch
bc5dec4d88 Return null on absent Policy via VaultSysTemplate.getPolicy(…). 
We now return null if a policy was not found. Previously, a VaultException was thrown.

Closes gh-202.
 2018-02-28 14:36:17 +01:00
Mark Paluch
b3a6322951 Polishing. 
Fix JavaDoc and reference doc versions and links.

See gh-198.
 2018-02-20 10:01:17 +01:00
Mark Paluch
d2c83b818f Prepare for next development iteration. 
See gh-198.
 2018-02-20 10:01:13 +01:00
Mark Paluch
4b1061d153 [maven-release-plugin] prepare release 2.0.0.RELEASE 
See gh-198.
 2018-02-20 09:43:14 +01:00
Mark Paluch
0d56e7695f Update changelog. 
See gh-198.
 2018-02-20 09:23:55 +01:00
Mark Paluch
88e1460be6 Upgrade to Spring Data Kay SR4. 
Closes gh-199.
 2018-02-20 09:19:26 +01:00
Mark Paluch
c49147513b Upgrade to Spring Framework 5.0.4. 
Closes gh-194.
 2018-02-19 13:19:09 +01:00
Mark Paluch
b2ad6ca82a Upgrade to AWS SDK 1.11.280. 
Closes gh-197.
 2018-02-19 11:31:03 +01:00
Mark Paluch
e20fd33a11 Upgrade to Netty 4.1.21.Final. 
Closes gh-196.
 2018-02-19 11:30:05 +01:00
Mark Paluch
3fc6dfcf11 Upgrade to Reactor Bismuth SR6. 
Closes gh-195.
 2018-02-19 11:28:59 +01:00
Mark Paluch
47d37b513b Upgrade to Spring Framework 5.0.4 snapshots. 
See gh-194.
 2018-02-19 11:28:17 +01:00
Mark Paluch
c3b2aee11d Add unit test for VaultPropertySource with profiles. 
See gh-193.
 2018-02-09 11:56:41 +01:00
Mark Paluch
78197da7ad Rename AwsIamAuthenticationOptions#serverName to serverId. 
Align naming with Vault's serverId that sets Vault-AWS-IAM-Server-ID headers on AWS requests for consistency. serverName builder/getter is deprecated now.

Closes gh-191.
 2018-02-06 11:10:35 +01:00
Mark Paluch
443fc03f8a Polishing 2018-01-31 16:07:53 +01:00
Mark Paluch
ef84690804 Upgrade to Vault 0.9.3. 
Closes gh-192.
 2018-01-31 16:07:48 +01:00
Mark Paluch
1e7c385eb2 Add Spring Vault guides to project site. 2018-01-25 10:02:14 +01:00
Mark Paluch
8f19127584 [maven-release-plugin] prepare for next development iteration 2018-01-25 09:48:54 +01:00
Mark Paluch
a94cbc15ae [maven-release-plugin] prepare release 2.0.0.RC2 2018-01-25 09:48:53 +01:00
Mark Paluch
11a346ef2b Polishing. 
Adjust generics and wording in reactive Template API.
 2018-01-25 09:44:34 +01:00
Mark Paluch
6791533e0e Update changelog. 
See gh-190.
 2018-01-25 09:34:43 +01:00
Mark Paluch
f07257464a Upgrade dependencies. 
Spring Framework 5.0.1 -> 5.0.3
Spring Data Kay SR1 -> Kay SR3
Reactor Bismuth SR3 -> Bismuth SR5
httpclient 4.5.3 -> 4.5.5
httpcore 4.4.8 -> 4.4.9
netty 4.1.17 -> 4.1.20
Jackson 2.9.2 -> 2.9.4

Closes gh-189
 2018-01-25 09:30:11 +01:00
Mark Paluch
35b5797c63 Polishing. 
See gh-187
 2018-01-23 10:49:11 +01:00
Mark Paluch
9ed2196068 Polishing. 
See gh-187
 2018-01-22 19:29:09 +01:00
Mark Paluch
28ff17d4f8 Add VaultBytesEncryptor and VaultBytesKeyGenerator. 
We now provide a Spring Security integration for Vault transit-based BytesEncryptor and BytesKeyGenerator.

VaultOperations operations = …;
VaultBytesKeyGenerator generator = new VaultBytesKeyGenerator(operations);

byte[] key = generator.generateKey();

VaultTransitOperations transit = …;
VaultBytesEncryptor encryptor = new VaultBytesEncryptor(transit, "my-key-name");

byte[] ciphertext = encryptor.encrypt(plaintext);
byte[] decrypted = encryptor.decrypt(ciphertext);

Closes gh-187.
 2018-01-22 12:11:05 +01:00
Mark Paluch
3e6fbe7581 Polishing. 
Remove PropertyTransformerSupport in favor of default method in PropertyTransformer and refactor PropertyTransformer to functional interface.

See gh-169.
 2018-01-17 15:36:30 +01:00