krd/vault-redux
1
0
Fork 0
Code
bea345a84c
vault-redux/.gitignore

134 lines
1.7 KiB
Plaintext
Raw Normal View History

Initial commit
2015-02-25 03:15:59 +03:00
# Compiled Object files, Static and Dynamic libs (Shared Objects)
*.o
*.a
*.so
# Folders
_obj
_test
Ignore coverage directory
2015-04-29 05:04:47 +03:00
.cover
Initial commit
2015-02-25 03:15:59 +03:00
# Architecture specific extensions/prefixes
*.[568vq]
[568vq].out
*.cgo1.go
*.cgo2.c
_cgo_defun.c
_cgo_gotypes.go
_cgo_export.*
_testmain.go
*.exe
*.test
*.prof
scripts
2015-03-04 10:14:18 +03:00
# Other dirs
Update .gitignore to remove overzealous application of 'pkg' shadowing vendor dir. Also update Travis to stop doing bad things.
2016-02-19 05:50:43 +03:00
/bin/
/pkg/
command/init
2015-03-13 20:32:39 +03:00
Replace go-bindata-assetfs build dependency with native go:embed (#11208) * copy over the webui move web_ui to http remove web ui files, add .gitkeep updates, messing with gitkeep and ignoring web_ui update ui scripts gitkeep ignore http/web_ui Remove debugging remove the jwt reference, that was from something else restore old jwt plugin move things around Revert "move things around" This reverts commit 2a35121850f5b6b82064ecf78ebee5246601c04f. Update ui path handling to not need the web_ui name part add desc move the http.FS conversion internal to assetFS update gitignore remove bindata dep clean up some comments remove asset check script that's no longer needed Update readme remove more bindata things restore asset check update packagespec update stub stub the assetFS method and set uiBuiltIn to false for non-ui builds update packagespec to build ui * fail if assets aren't found * tidy up vendor * go mod tidy * updating .circleci * restore tools.go * re-re-re-run make packages * re-enable arm64 * Adding change log * Removing a file Co-authored-by: hamid ghaf <hamid@hashicorp.com>
2021-08-18 18:05:11 +03:00
# Generated Web UI goes here
Update gitignore (#14536)
2022-03-16 21:56:51 +03:00
/http/web_ui/*.*
/http/web_ui/**/*.*
Replace go-bindata-assetfs build dependency with native go:embed (#11208) * copy over the webui move web_ui to http remove web ui files, add .gitkeep updates, messing with gitkeep and ignoring web_ui update ui scripts gitkeep ignore http/web_ui Remove debugging remove the jwt reference, that was from something else restore old jwt plugin move things around Revert "move things around" This reverts commit 2a35121850f5b6b82064ecf78ebee5246601c04f. Update ui path handling to not need the web_ui name part add desc move the http.FS conversion internal to assetFS update gitignore remove bindata dep clean up some comments remove asset check script that's no longer needed Update readme remove more bindata things restore asset check update packagespec update stub stub the assetFS method and set uiBuiltIn to false for non-ui builds update packagespec to build ui * fail if assets aren't found * tidy up vendor * go mod tidy * updating .circleci * restore tools.go * re-re-re-run make packages * re-enable arm64 * Adding change log * Removing a file Co-authored-by: hamid ghaf <hamid@hashicorp.com>
2021-08-18 18:05:11 +03:00
command/init
2015-03-13 20:32:39 +03:00
# Vault-specific
example.hcl
update gitignore
2015-03-16 06:17:13 +03:00
example.vault.d
Update website whitespace and formatting
2015-04-23 02:47:11 +03:00
Initial import of Azure Secrets (#5120) * Initial import of Azure Secrets * Update vendor folder
2018-08-16 22:18:06 +03:00
# Without this, the *.[568vq] above ignores this folder.
!**/graphrbac/1.6
Update website whitespace and formatting
2015-04-23 02:47:11 +03:00
# Ruby
Ignore all of website/vendor
2015-10-08 20:22:03 +03:00
website/vendor
Update website whitespace and formatting
2015-04-23 02:47:11 +03:00
website/.bundle
Add website/build to gitignore
2015-05-18 17:55:13 +03:00
website/build
New Docs Website (#5535) * conversion stage 1 * correct image paths * add sidebar title to frontmatter * docs/concepts and docs/internals * configuration docs and multi-level nav corrections * commands docs, index file corrections, small item nav correction * secrets converted * auth * add enterprise and agent docs * add extra dividers * secret section, wip * correct sidebar nav title in front matter for apu section, start working on api items * auth and backend, a couple directory structure fixes * remove old docs * intro side nav converted * reset sidebar styles, add hashi-global-styles * basic styling for nav sidebar * folder collapse functionality * patch up border length on last list item * wip restructure for content component * taking middleman hacking to the extreme, but its working * small css fix * add new mega nav * fix a small mistake from the rebase * fix a content resolution issue with middleman * title a couple missing docs pages * update deps, remove temporary markup * community page * footer to layout, community page css adjustments * wip downloads page * deps updated, downloads page ready * fix community page * homepage progress * add components, adjust spacing * docs and api landing pages * a bunch of fixes, add docs and api landing pages * update deps, add deploy scripts * add readme note * update deploy command * overview page, index title * Update doc fields Note this still requires the link fields to be populated -- this is solely related to copy on the description fields * Update api_basic_categories.yml Updated API category descriptions. Like the document descriptions you'll still need to update the link headers to the proper target pages. * Add bottom hero, adjust CSS, responsive friendly * Add mega nav title * homepage adjustments, asset boosts * small fixes * docs page styling fixes * meganav title * some category link corrections * Update API categories page updated to reflect the second level headings for api categories * Update docs_detailed_categories.yml Updated to represent the existing docs structure * Update docs_detailed_categories.yml * docs page data fix, extra operator page remove * api data fix * fix makefile * update deps, add product subnav to docs and api landing pages * Rearrange non-hands-on guides to _docs_ Since there is no place for these on learn.hashicorp, we'll put them under _docs_. * WIP Redirects for guides to docs * content and component updates * font weight hotfix, redirects * fix guides and intro sidenavs * fix some redirects * small style tweaks * Redirects to learn and internally to docs * Remove redirect to `/vault` * Remove `.html` from destination on redirects * fix incorrect index redirect * final touchups * address feedback from michell for makefile and product downloads
2018-10-19 18:40:11 +03:00
website/tmp
gitignore should ignore vagrant
2015-04-25 22:06:17 +03:00
# Vagrant
.vagrant/
Vagrantfile
# Configs
*.hcl
Add LICENSE back to pkcs7 (#18527) This was not copied over when the this code was copied in https://github.com/hashicorp/vault/pull/12340. Also adds a stub for the `.copywrite.hcl` file (for when Vault is onboarded to Copywrite) and adds the `pkcs7` and `ui/node_modules` to the ignore pattern.
2022-12-22 20:54:43 +03:00
!.copywrite.hcl
adding CRT to main branch (#13088) * adding CRT to main branch * cleanup * um i dont know how that got removed but heres the fix * add vault.service Co-authored-by: Kyle Penfound <kpenfound11@gmail.com>
2021-12-06 19:06:22 +03:00
!.release/ci.hcl
add security-scan for CRT (#13627) * add security-scan * updating the alpine version * clean up * update the alpine version to be more prescriptive
2022-01-31 19:35:25 +03:00
!.release/security-scan.hcl
adding CRT to main branch (#13088) * adding CRT to main branch * cleanup * um i dont know how that got removed but heres the fix * add vault.service Co-authored-by: Kyle Penfound <kpenfound11@gmail.com>
2021-12-06 19:06:22 +03:00
!.release/linux/package/etc/vault.d/vault.hcl
Agent auto auth wrapping new config checks (#6479) * Simplify Run(): the function that was being sent over a channel doesn't need to close over anything except latestToken, and we don't need to create a new one each iteration. Instead just pass the relevant items, namely the token and sink to work on. * Disallow the following config combinations: 1. auto_auth.method.wrap_ttl > 0 and multiple file sinks 2. auto_auth.method.wrap_ttl > 0 and single file sink with wrap_ttl > 0 3. auto_auth.method.wrap_ttl > 0 and cache.use_auto_auth_token = true * Expose errors that occur when APIProxy is forwarding request to Vault. * Fix merge issues.
2019-04-05 23:12:54 +03:00
!command/agent/config/test-fixtures/*.hcl
[VAULT-2776] Add prefix_filter option to Vault (#12025) * [VAULT-2776] Add prefix_filter support to vault * [VAULT-2776] Add filter_default config, update docs * [VAULT-2776] Add changelog file * [VAULT-2776] Update telemetry tests and error handling * [VAULT-2776] Add test fixtures, update test * [VAULT-2776] Update gitignore hcl filter
2021-07-09 22:49:53 +03:00
!command/server/test-fixtures/**/*.hcl
Add an enos scenario to test vault docker images using k8s/kind/helm (#17515) * Added a scenario to test docker artifacts using the vault helm chart and a kind cluster * Addedt enos-k8s github workflow
2022-10-19 21:26:31 +03:00
!enos/**/*.hcl
Agent auto auth wrapping new config checks (#6479) * Simplify Run(): the function that was being sent over a channel doesn't need to close over anything except latestToken, and we don't need to create a new one each iteration. Instead just pass the relevant items, namely the token and sink to work on. * Disallow the following config combinations: 1. auto_auth.method.wrap_ttl > 0 and multiple file sinks 2. auto_auth.method.wrap_ttl > 0 and single file sink with wrap_ttl > 0 3. auto_auth.method.wrap_ttl > 0 and cache.use_auto_auth_token = true * Expose errors that occur when APIProxy is forwarding request to Vault. * Fix merge issues.
2019-04-05 23:12:54 +03:00
[QTI-308] Add Enos integration tests (#16760) Add our initial Enos integration tests to Vault. The Enos scenario workflow will automatically be run on branches that are created from the `hashicorp/vault` repository. See the README.md in ./enos a full description of how to compose and execute scenarios locally. * Simplify the metadata build workflow jobs * Automatically determine the Go version from go.mod * Add formatting check for Enos integration scenarios * Add Enos smoke and upgrade integration scenarios * Add Consul backend matrix support * Add Ubuntu and RHEL distro support * Add Vault edition support * Add Vault architecture support * Add Vault builder support * Add Vault Shamir and awskms auto-unseal support * Add Raft storage support * Add Raft auto-join voter verification * Add Vault version verification * Add Vault seal verification * Add in-place upgrade support for all variants * Add four scenario variants to CI. These test a maximal distribution of the aforementioned variants with the `linux/amd64` Vault install bundle. Signed-off-by: Ryan Cragun <me@ryan.ec> Co-authored-by: Rebecca Willett <rwillett@hashicorp.com> Co-authored-by: Jaymala <jaymalasinha@gmail.com>
2022-08-23 22:53:41 +03:00
# Enos
enos: use on-demand targets (#21459) (#21464) Add an updated `target_ec2_instances` module that is capable of dynamically splitting target instances over subnet/az's that are compatible with the AMI architecture and the associated instance type for the architecture. Use the `target_ec2_instances` module where necessary. Ensure that `raft` storage scenarios don't provision unnecessary infrastructure with a new `target_ec2_shim` module. After a lot of trial, the state of Ec2 spot instance capacity, their associated APIs, and current support for different fleet types in AWS Terraform provider, have proven to make using spot instances for scenario targets too unreliable. The current state of each method: * `target_ec2_fleet`: unusable due to the fact that the `instant` type does not guarantee fulfillment of either `spot` or `on-demand` instance request types. The module does support both `on-demand` and `spot` request types and is capable of bidding across a maximum of four availability zones, which makes it an attractive choice if the `instant` type would always fulfill requests. Perhaps a `request` type with `wait_for_fulfillment` option like `aws_spot_fleet_request` would make it more viable for future consideration. * `target_ec2_spot_fleet`: more reliable if bidding for target instances that have capacity in the chosen zone. Issues in the AWS provider prevent us from bidding across multiple zones succesfully. Over the last 2-3 months target capacity for the instance types we'd prefer to use has dropped dramatically and the price is near-or-at on-demand. The volatility for nearly no cost savings means we should put this option on the shelf for now. * `target_ec2_instances`: the most reliable method we've got. It is now capable of automatically determing which subnets and availability zones to provision targets in and has been updated to be usable for both Vault and Consul targets. By default we use the cheapest medium instance types that we've found are reliable to test vault. * Update .gitignore * enos/modules/create_vpc: create a subnet for every availability zone * enos/modules/target_ec2_fleet: bid across the maximum of four availability zones for targets * enos/modules/target_ec2_spot_fleet: attempt to make the spot fleet bid across more availability zones for targets * enos/modules/target_ec2_instances: create module to use ec2:RunInstances for scenario targets * enos/modules/target_ec2_shim: create shim module to satisfy the target module interface * enos/scenarios: use target_ec2_shim for backend targets on raft storage scenarios * enos/modules/az_finder: remove unsed module Signed-off-by: Ryan Cragun <me@ryan.ec> Co-authored-by: Ryan Cragun <me@ryan.ec>
2023-06-27 01:54:39 +03:00
.enos
enos-local.vars.hcl
enos/**/support
enos/**/kubeconfig
.terraform
.terraform.lock.hcl
.tfstate.*
gitignore should ignore vagrant
2015-04-25 22:06:17 +03:00
Ignore .DS_Store files
2015-04-29 07:11:50 +03:00
.DS_Store
Added a bootstrap target in the makefile to download required tools and updated the README.md instructions
2015-06-01 02:32:36 +03:00
.idea
update gitignore
2017-06-20 20:40:04 +03:00
.vscode
Ignore .DS_Store files
2015-04-29 07:11:50 +03:00
initial pass at JWT secret backend
2015-07-23 23:06:53 +03:00
dist/*
Fixing merge conflict
2015-08-11 20:04:47 +03:00
Merge PR #10095: Integrated Storage Cloud Auto-Join
2020-10-13 23:26:39 +03:00
# ignore ctags
./tags
Push a lot of logic into Router to make a bunch of it nicer and enable a lot of cleanup. Plumb config and calls to framework.Backend.Setup() into logical_system and elsewhere, including tests.
2015-09-04 23:58:12 +03:00
Update .gitignore to cover editor backup files
2015-08-08 01:15:47 +03:00
# Editor backups
*~
*.sw[a-z]
Add mongodb secret backend
2016-05-13 23:42:09 +03:00
# IntelliJ IDEA project files
.idea
*.ipr
*.iml
Update gitignore
2016-12-14 23:51:27 +03:00
# compiled output
ui/dist
ui/tmp
Update gitignore
2017-11-15 05:42:06 +03:00
ui/root
Update gitignore
2016-12-14 23:51:27 +03:00
# dependencies
ui/node_modules
ui/bower_components
# misc
ui/.DS_Store
ui/.sass-cache
ui/connect.lock
ui/coverage/*
ui/libpeerconnection.log
ui/npm-debug.log
Sync a few things over
2019-04-13 07:04:44 +03:00
ui/test-reports/*
Update gitignore
2016-12-14 23:51:27 +03:00
ui/testem.log
Sync makefile
2017-10-23 19:38:30 +03:00
# used for JS acceptance tests
ui/tests/helpers/vault-keys.js
ui/vault-ui-integration-server.pid
Update gitignore
2018-03-02 22:06:36 +03:00
# for building static assets
node_modules
New Docs Website (#5535) * conversion stage 1 * correct image paths * add sidebar title to frontmatter * docs/concepts and docs/internals * configuration docs and multi-level nav corrections * commands docs, index file corrections, small item nav correction * secrets converted * auth * add enterprise and agent docs * add extra dividers * secret section, wip * correct sidebar nav title in front matter for apu section, start working on api items * auth and backend, a couple directory structure fixes * remove old docs * intro side nav converted * reset sidebar styles, add hashi-global-styles * basic styling for nav sidebar * folder collapse functionality * patch up border length on last list item * wip restructure for content component * taking middleman hacking to the extreme, but its working * small css fix * add new mega nav * fix a small mistake from the rebase * fix a content resolution issue with middleman * title a couple missing docs pages * update deps, remove temporary markup * community page * footer to layout, community page css adjustments * wip downloads page * deps updated, downloads page ready * fix community page * homepage progress * add components, adjust spacing * docs and api landing pages * a bunch of fixes, add docs and api landing pages * update deps, add deploy scripts * add readme note * update deploy command * overview page, index title * Update doc fields Note this still requires the link fields to be populated -- this is solely related to copy on the description fields * Update api_basic_categories.yml Updated API category descriptions. Like the document descriptions you'll still need to update the link headers to the proper target pages. * Add bottom hero, adjust CSS, responsive friendly * Add mega nav title * homepage adjustments, asset boosts * small fixes * docs page styling fixes * meganav title * some category link corrections * Update API categories page updated to reflect the second level headings for api categories * Update docs_detailed_categories.yml Updated to represent the existing docs structure * Update docs_detailed_categories.yml * docs page data fix, extra operator page remove * api data fix * fix makefile * update deps, add product subnav to docs and api landing pages * Rearrange non-hands-on guides to _docs_ Since there is no place for these on learn.hashicorp, we'll put them under _docs_. * WIP Redirects for guides to docs * content and component updates * font weight hotfix, redirects * fix guides and intro sidenavs * fix some redirects * small style tweaks * Redirects to learn and internally to docs * Remove redirect to `/vault` * Remove `.html` from destination on redirects * fix incorrect index redirect * final touchups * address feedback from michell for makefile and product downloads
2018-10-19 18:40:11 +03:00
# Website
website/.bundle
website/build/
website/npm-debug.log
website/vendor
website/.bundle
website/.cache
website/assets/node_modules
website/assets/public
website/components/node_modules
Merge PR #10095: Integrated Storage Cloud Auto-Join
2020-10-13 23:26:39 +03:00
.buildcache/
.releaser/
VAULT-8732: Add `log-file` to Vault Agent (#17841) * Started work on adding log-file support to Agent * Allow log file to be picked up and appended * Use NewLogFile everywhere * Tried to pull out the config aggregation from Agent.Run Co-authored-by: Nick Cabatoff <ncabatoff@hashicorp.com>
2022-11-11 13:59:16 +03:00
*.log
VAULT-13169 Require go docs for all new test functions (#18971) * example for checking go doc tests * add analyzer test and action * get metadata step * install revgrep * fix for ci * add revgrep to go.mod * clarify how analysistest works
2023-02-07 12:41:04 +03:00
[QT-525] enos: use spot instances for Vault targets (#20037) The previous strategy for provisioning infrastructure targets was to use the cheapest instances that could reliably perform as Vault cluster nodes. With this change we introduce a new model for target node infrastructure. We've replaced on-demand instances for a spot fleet. While the spot price fluctuates based on dynamic pricing, capacity, region, instance type, and platform, cost savings for our most common combinations range between 20-70%. This change only includes spot fleet targets for Vault clusters. We'll be updating our Consul backend bidding in another PR. * Create a new `vault_cluster` module that handles installation, configuration, initializing, and unsealing Vault clusters. * Create a `target_ec2_instances` module that can provision a group of instances on-demand. * Create a `target_ec2_spot_fleet` module that can bid on a fleet of spot instances. * Extend every Enos scenario to utilize the spot fleet target acquisition strategy and the `vault_cluster` module. * Update our Enos CI modules to handle both the `aws-nuke` permissions and also the privileges to provision spot fleets. * Only use us-east-1 and us-west-2 in our scenario matrices as costs are lower than us-west-1. Signed-off-by: Ryan Cragun <me@ryan.ec>
2023-04-13 22:44:43 +03:00
tools/godoctests/.bin
backport of commit 8c18f24b9da475c13f7908e609c5d4be24c773e6 (#21611) (#21615) * combine into one checker * combine and simplify ci checks * add to test package list * remove testing test * only run deprecations check * only run deprecations check * remove unneeded repo check * fix bash options Co-authored-by: miagilepner <mia.epner@hashicorp.com>
2023-07-10 18:05:20 +03:00
tools/gonilnilfunctions/.bin
tools/codechecker/.bin
.ci-bootstrap
Copy Permalink