Timothy Messier 32dd7f07d0 fix(vault): Only persist revokable credentials ...

When issuing credentials from vault credential libraries, only persist
the vault credential if it is revokable. A credential that is revokable
has a valid lease id that can be used to revoke the lease in vault. If
the credential is not revokable it is also not renewable since renewing
also requires a lease id.

See: https://developer.hashicorp.com/vault/docs/concepts/lease

2023-02-02 17:43:17 +00:00

..

api/genapi

feat(credentiallibraries): support vault ssh certificates

2023-02-02 17:43:16 +00:00

auth

refactor (kms): add GetWrapperer for RewrapFn parameter (#2701)

2022-12-13 05:38:14 -05:00

authtoken

refactor (kms): add GetWrapperer for RewrapFn parameter (#2701)

2022-12-13 05:38:14 -05:00

boundary

feat: add initial migration hook

2022-08-22 12:15:20 -07:00

cmd

feat(cli): Add vault ssh certificate credential library

2023-02-02 17:43:17 +00:00

credential

fix(vault): Only persist revokable credentials

2023-02-02 17:43:17 +00:00

daemon

feat(target): Allow vault ssh cert library as credential source

2023-02-02 17:43:17 +00:00

db

feat(wh): Support vault ssh certificate credentials

2023-02-02 17:43:17 +00:00

errors

feat(handlers): Support address field on a Target

2023-01-09 15:39:55 +00:00

filter

Rewrite interface{} to any (#2535)

2022-10-25 19:29:38 -04:00

gen

feat(controller): Translate ssh certificate credentials for worker

2023-02-02 17:43:17 +00:00

host

refactor (kms): add GetWrapperer for RewrapFn parameter (#2701)

2022-12-13 05:38:14 -05:00

iam

Add Staticcheck to Build Pipeline (#2421)

2022-12-13 12:07:18 -05:00

intglobals

Update password generated account IDs (#1290)

2021-06-08 12:31:58 -04:00

kms

fix(kms/test): Fix flake (#2723)

2022-12-16 12:16:17 -05:00

libs

Rewrite interface{} to any (#2535)

2022-10-25 19:29:38 -04:00

observability/event

Add Staticcheck to Build Pipeline (#2421)

2022-12-13 12:07:18 -05:00

oplog

formatting consistency for 'create function' statements (#2620)

2022-11-18 11:04:34 -08:00

perms

Add grant parsing fuzz test (#2534)

2023-01-06 18:27:19 -05:00

plugin

Rewrite interface{} to any (#2535)

2022-10-25 19:29:38 -04:00

proto

feat(controller): Translate ssh certificate credentials for worker

2023-02-02 17:43:17 +00:00

proxy

Update grpc-gateway dependency (#2311)

2022-08-11 20:24:14 -04:00

requests

Add grant parsing fuzz test (#2534)

2023-01-06 18:27:19 -05:00

scheduler

Add job run cleaner (#2866)

2023-01-31 20:41:33 -05:00

server

Only return live workers in ListHcpbWorkersResponse (#2876)

2023-02-01 10:24:56 -08:00

session

bug(sessions): Fix authorizeSession race conditions in handleProxy (#2795)

2023-01-24 09:24:03 -05:00

target

fix(target): Correct accounting of updated rows when deleting address (#2799)

2023-01-19 16:12:04 -05:00

tests

feat(cli): Add vault ssh certificate credential library

2023-02-02 17:43:17 +00:00

types

Key Rotation/Destruction (#2477) (#2607)

2022-11-16 18:17:28 -05:00

ui

chore: bump ui commit to include vault ssh cert feature (#2883)

2023-02-01 14:42:15 -06:00

util

Key Rotation/Destruction (#2477) (#2607)

2022-11-16 18:17:28 -05:00

website/permstable

Remove deprecated methods/fields on targets (#2393)

2022-09-15 09:20:08 -04:00

adding-a-new-field-readme.md

feat(cli): Implement address flag for boundary targets create/update

2023-01-09 15:39:55 +00:00

classification-rubric.md

doc(classification): Add initial rubric

2022-04-20 13:32:31 -04:00