Commit Graph

479 Commits

Author SHA1 Message Date
Mark Paluch
370deac948 Update documentation for ConfigData 2020-09-18 15:54:02 +02:00
Mark Paluch
1cd03dd39e Introduce AutoConfiguration classes for Vault 2020-09-18 15:53:50 +02:00
Mark Paluch
c71bb083e6 Extract bean instance creation into VaultConfiguration and VaultReactiveAutoConfiguration 2020-09-18 15:53:32 +02:00
Mark Paluch
b86510a852 Remove Bootstrap context marker class from classpath 2020-09-17 16:21:57 +02:00
Mark Paluch
f0e2b64ec3 Introduce AutoConfiguration variants 2020-09-17 16:21:42 +02:00
Mark Paluch
73e978a946 Add Vault implementation for ConfigDataResolver and ConfigDataLoader
Discover SecretBackendMetadataFactory and VaultSecretBackendDescriptor using spring.factories. Add instance suppliers for all imperative support classes.
2020-09-17 16:21:16 +02:00
Mark Paluch
43990382c4 Expose RestTemplateFactory and WebClientFactory
We're now exposing vaulRestTemplateFactory and vaultWebClientFactory that allow construction of RestTemplate respective WebClient with Spring Vault's customizations applied.

Closes gh-401.
2020-09-17 12:06:50 +02:00
Mark Paluch
477e8b9bb9 Polishing
Reformat code using new formatter Settings.

See gh-482.
2020-09-17 11:28:42 +02:00
Mark Paluch
82e845fff0 Upgrade to Spring Vault 2.3.0 M1
Closes gh-482.
2020-09-17 11:28:06 +02:00
Mark Paluch
2e4bf3d0cd Introduce configuration properties for session lifecycle management
We now provide configuration properties to configure session token renewal, especially renewal and expiry thresholds.

spring.cloud.vault:
    session.lifecycle:
        enabled: true
        refresh-before-expiry: 10s
        expiry-threshold: 20s

Closes gh-400.
2020-08-11 17:07:37 +02:00
John Gasper
254342bb73 Fix Invalid effective property name in reference documentation
`server-id:` should be `server-name` per https://github.com/spring-cloud/spring-cloud-vault/blob/master/spring-cloud-vault-config/src/main/java/org/springframework/cloud/vault/config/VaultProperties.java#L584-L588

See gh-407.
2020-08-11 12:26:30 +02:00
dependabot-preview[bot]
8ca52a0ba7 Bump assertj-core from 3.10.0 to 3.16.1
Bumps [assertj-core](https://github.com/joel-costigliola/assertj-core) from 3.10.0 to 3.16.1.
- [Release notes](https://github.com/joel-costigliola/assertj-core/releases)
- [Commits](https://github.com/joel-costigliola/assertj-core/compare/assertj-core-3.10.0...assertj-core-3.16.1)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>

Co-authored-by: dependabot-preview[bot] <27856297+dependabot-preview[bot]@users.noreply.github.com>
See gh-419.
2020-08-11 12:25:08 +02:00
dependabot-preview[bot]
c799e4d2d6 Bump aws-java-sdk-core from 1.11.627 to 1.11.838
Bumps [aws-java-sdk-core](https://github.com/aws/aws-sdk-java) from 1.11.627 to 1.11.838.
- [Release notes](https://github.com/aws/aws-sdk-java/releases)
- [Changelog](https://github.com/aws/aws-sdk-java/blob/master/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-java/compare/1.11.627...1.11.838)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>

Co-authored-by: dependabot-preview[bot] <27856297+dependabot-preview[bot]@users.noreply.github.com>

See gh-434.
2020-08-11 12:21:55 +02:00
dependabot-preview[bot]
1e28ce206e Bump bcpkix-jdk15on from 1.65 to 1.66
Bumps [bcpkix-jdk15on](https://github.com/bcgit/bc-java) from 1.65 to 1.66.
- [Release notes](https://github.com/bcgit/bc-java/releases)
- [Changelog](https://github.com/bcgit/bc-java/blob/master/docs/releasenotes.html)
- [Commits](https://github.com/bcgit/bc-java/commits)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>

Co-authored-by: dependabot-preview[bot] <27856297+dependabot-preview[bot]@users.noreply.github.com>

See gh-421.
2020-08-11 12:21:17 +02:00
dependabot-preview[bot]
f5a2ea293e Bump maven-source-plugin from 3.0.1 to 3.2.1
Bumps [maven-source-plugin](https://github.com/apache/maven-source-plugin) from 3.0.1 to 3.2.1.
- [Release notes](https://github.com/apache/maven-source-plugin/releases)
- [Commits](https://github.com/apache/maven-source-plugin/compare/maven-source-plugin-3.0.1...maven-source-plugin-3.2.1)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>

Co-authored-by: dependabot-preview[bot] <27856297+dependabot-preview[bot]@users.noreply.github.com>
See gh-417.
2020-08-11 12:20:27 +02:00
dependabot-preview[bot]
0129da0646 Bump maven-javadoc-plugin from 3.0.1 to 3.2.0
Bumps [maven-javadoc-plugin](https://github.com/apache/maven-javadoc-plugin) from 3.0.1 to 3.2.0.
- [Release notes](https://github.com/apache/maven-javadoc-plugin/releases)
- [Commits](https://github.com/apache/maven-javadoc-plugin/compare/maven-javadoc-plugin-3.0.1...maven-javadoc-plugin-3.2.0)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>

Co-authored-by: dependabot-preview[bot] <27856297+dependabot-preview[bot]@users.noreply.github.com>

See gh-414.
2020-08-11 12:19:22 +02:00
dependabot-preview[bot]
32174ba307 Bump jacoco-maven-plugin from 0.7.9 to 0.8.5
Bumps [jacoco-maven-plugin](https://github.com/jacoco/jacoco) from 0.7.9 to 0.8.5.
- [Release notes](https://github.com/jacoco/jacoco/releases)
- [Commits](https://github.com/jacoco/jacoco/compare/v0.7.9...v0.8.5)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>

Co-authored-by: dependabot-preview[bot] <27856297+dependabot-preview[bot]@users.noreply.github.com>

See gh-413.
2020-08-11 12:18:55 +02:00
spencergibb
895df4456a Uses new spring-cloud-starter-bootstrap.
This allows opt-in to bootstrap via classpath rather than properties.
2020-08-10 15:42:24 -04:00
spencergibb
053c054b5c Ignores .sdkmanrc 2020-08-10 15:41:45 -04:00
spencergibb
d65368c790 Updates to use repo.spring.io/snapshot 2020-08-10 15:41:17 -04:00
buildmaster
d1ecef4af1 Going back to snapshots 2020-07-23 19:32:34 +00:00
buildmaster
b8a7610805 Update SNAPSHOT to 3.0.0-M3 2020-07-23 19:30:44 +00:00
spencergibb
ef59dcdb91 Adds junit-vintage-engine as a test dependency 2020-06-08 12:57:21 -04:00
Marcin Grzejszczak
5ba60c38d8 Changed packaging to jar 2020-06-08 17:12:48 +02:00
Marcin Grzejszczak
970c64888a Uploading sources for docs 2020-06-08 16:48:16 +02:00
buildmaster
bf890e0c44 Bumping versions 2020-06-04 12:00:31 +00:00
buildmaster
89dd6abde4 Going back to snapshots 2020-05-29 19:31:33 +00:00
buildmaster
627411fb42 Update SNAPSHOT to 3.0.0-M2 2020-05-29 19:30:29 +00:00
Marcin Grzejszczak
f4da083db1 Changed vault config docs to vault docs 2020-05-26 15:25:34 +02:00
Marcin Grzejszczak
5717f080b6 Setting up repository for docs.spring.io migration 2020-05-25 14:40:36 +02:00
Marcin Grzejszczak
8af238ef4c Setting up repository for docs.spring.io migration 2020-05-25 13:43:20 +02:00
buildmaster
e93e1ffdd5 Bumping versions 2020-05-22 12:00:40 +00:00
Mark Paluch
68d9f7bc58 Introduce profile override for Key Value backend.
We now provide an override spring.cloud.vault.kv.profiles=… to specify application profiles that should be used for Vault access instead of Environment.getActiveProfiles().

Closes gh-385.
2020-05-20 15:26:43 +02:00
Mark Paluch
701ad55632 Polishing
Fiy typos, improve wording.

See gh-392.
2020-05-20 14:53:38 +02:00
Mark Paluch
0ea68bad57 Database support for Elasticsearch
Spring Cloud Vault can now obtain credentials for Elasticsearch's HTTP API by enabling vault.config.backends.elasticsearch.enabled=true and providing a role name.

Closes gh-392.
2020-05-20 14:51:58 +02:00
Mark Paluch
0f7b9ec7fc Remove spring.cloud.vault.generic configuration properties.
Spring Cloud Vault uses now a single mechanism for key-value backend configuration. Properties at spring.cloud.vault.generic.* are no longer supported.

All associated functionality is now solely available by configuring the corresponding spring.cloud.vault.kv.* properties. The support classes GenericSecretBackendMetadata and VaultGenericBackendProperties were removed in favor of KeyValueSecretBackendMetadata respective VaultKeyValueBackendProperties. spring.cloud.vault.kv.enabled is now enabled by default to preserve spring.cloud.vault.generic.enabled behavior.

Closes gh-395
2020-05-20 10:57:33 +02:00
maaaace
ef2c83758d Fix download vault script for arm64 processor
install_vault.sh just download and unzip binary vault for amd64, which cannot be executed
on arm64 architecture processors. Add architecture checking in bash script to support this.

Signed-off-by: maaaace <fuheming@huawei.com>
Original pull request: gh-402.
2020-05-19 16:53:14 +02:00
Mark Paluch
95b5abdfad Upgrade dependencies
* httpclient 4.5.10 -> 4.5.12
* httpcore 4.4.12 -> 4.4.13
* okhttp3 3.14.4 -> 3.14.9
* bcpkix-jdk15on 1.64 -> 1.65
* google-api-services-iam v1-rev20191010-1.30.3 -> v1-rev20200221-1.30.9
* google-auth-library-oauth2-http 0.18.0 -> 0.20.0

Closes gh-404.
2020-05-19 16:50:15 +02:00
buildmaster
180ebc4369 Bumping versions 2020-04-17 12:00:10 +00:00
buildmaster
2b897f3128 Going back to snapshots 2020-04-09 23:56:16 +00:00
buildmaster
baa0681ef9 Update SNAPSHOT to 3.0.0.M1 2020-04-09 23:55:07 +00:00
buildmaster
8fcf8cb750 Bumping versions 2020-04-03 12:00:12 +00:00
Mark Paluch
33110972ea Polishing
Reformat documentation.

See gh-394.
2020-04-02 15:08:53 +02:00
Mark Paluch
28f4399076 Deprecate spring.cloud.vault.generic in favor of spring.cloud.vault.kv
Deprecating properties that used the previous kv backend name "generic" so these can be removed with the next major release.

Closes gh-394.
2020-04-02 15:08:52 +02:00
Mark Paluch
7b45968938 Add integration test for VaultReactiveHealthIndicator
Add test for the reactive health indicator.

See gh-397
2020-04-02 14:34:35 +02:00
Marcin Grzejszczak
66ea2c49db Updated docs 2020-04-01 13:44:06 +02:00
Daniel Franco
24273aad41 Update consul to 1.7.2 and vault to 1.3.4.
Original pull request: gh-396.
2020-03-25 09:20:59 +01:00
Mark Paluch
3d0672e159 Polishing
Add this for field dereference. Tweak renewal timing for shorter test runtime. Move lifecycle configuration into SecretLeaseContainer bean method.

Closes gh-393.
2020-03-20 14:23:29 +01:00
Spencer Gibb
f74ff1f9a4 Use events to initiate ConfigurationProperties refresh in the application context
The ConsulBackendMetadata basically publishes and event on SecretLeaseCreatedEvent and something else does the rebinding

See gh-393
2020-03-20 14:23:27 +01:00
Mark Paluch
6ea30433f2 Request rotating tokens for Consul
Extend LeasingSecretBackendMetadata with callback methods before/after registration to add secret rotation listeners for config properties rebinding.

Refactor Consul configuration to use LeasingSecretBackendMetadata and rebind Consul ConfigurationProperties accordingly.

See gh-393
2020-03-20 14:22:53 +01:00