Code

Vault MVP#1353

Code

Merged

erzetpe merged 43 commits intodevelophitachienergy/epiphany:developfrom feature/vault-mvphitachienergy/epiphany:feature/vault-mvpCopy head branch name to clipboardJun 26, 2020

+985-197

Commits

Commits on Jun 22, 2020

• Fix of configure-vault script

  

  erzetpe

  authored and

  Tomasz Arendt

  committed
  1a593c5

• Move initialize vault to script, change unseal logic

  

  erzetpe

  authored and

  Tomasz Arendt

  committed
  f5db179

• Add checking if vault has been unsealed properly and turning kubernetes authentication automatically with kubernetes integration.

  

  erzetpe

  authored and

  Tomasz Arendt

  committed
  7fa5a10

• Add userpass authentication and default policies

  

  erzetpe

  authored and

  Tomasz Arendt

  committed
  cf96608

• Adding users to userpass authentication

  

  erzetpe

  authored and

  Tomasz Arendt

  committed
  cdb5425

• Add user creation for userpass authentication

  

  erzetpe

  authored and

  Tomasz Arendt

  committed
  2433c98

• Add user creation for userpass authentication - ansible part

  

  erzetpe

  authored and

  Tomasz Arendt

  committed
  77973b4

• Fix issue when no users authenticating via userpass are added to vault

  

  erzetpe

  authored and

  Tomasz Arendt

  committed
  cef1e0c

• Add users section to default and setting log level for vault

  

  erzetpe

  authored and

  Tomasz Arendt

  committed
  f0fefb0

• Kubernetes configuration and integration

  

  erzetpe

  authored and

  Tomasz Arendt

  committed
  1fd7917

• Fix issue with path to helm in configure-vault.sh script

  Show description for 4e657ac
  

  erzetpe

  authored and

  Tomasz Arendt

  committed
  4e657ac

• Add TODO, create application service account for integration with kubernetes

  

  erzetpe

  authored and

  Tomasz Arendt

  committed
  1974c27

• Add TODO, add missing service account template for application authentication

  

  erzetpe

  authored and

  Tomasz Arendt

  committed
  4f8f632

• Change location of log files

  

  erzetpe

  authored and

  Tomasz Arendt

  committed
  f8a51fc

• Change policy to expose configurable endpoints

  

  erzetpe

  authored and

  Tomasz Arendt

  committed
  a693408

• Create policies folder for config, change vault secret variable name

  

  erzetpe

  authored and

  Tomasz Arendt

  committed
  f153d46

• Add setting to clean of token helper disable/enable

  

  erzetpe

  authored and

  Tomasz Arendt

  committed
  04af9bc

• Change setting limits for core dumps, add flag to override existing users

  

  erzetpe

  authored and

  Tomasz Arendt

  committed
  826ddb3

• Add parameters to override existing vault users in vault

  

  erzetpe

  authored and

  Tomasz Arendt

  committed
  a73b965

• Add Vault symlink to PATH accessible directory

  

  erzetpe

  authored and

  Tomasz Arendt

  committed
  dad95be

• Add timestamp and changed configure_vault log location

  Show description for 1183b63
  

  erzetpe

  authored and

  Tomasz Arendt

  committed
  1183b63

• Changes related to code review

  

  erzetpe

  authored and

  Tomasz Arendt

  committed
  01540ec

• Change name of function check_vault_error and add errors catching to kubectl invocations

  

  erzetpe

  authored and

  Tomasz Arendt

  committed
  2f6ffcc

• Add option to unseal vault with script after restart, cosmetic change to configure-vault.sh

  

  erzetpe

  authored and

  Tomasz Arendt

  committed
  ef1fb46

• Add contidional option to unseal vault with script after restart, separate autounseal from autoconfiguration option

  Show description for 4bfcf8f
  

  erzetpe

  authored and

  Tomasz Arendt

  committed
  4bfcf8f

• Add namespaces support, disable/enable ui, clean defaults file

  

  erzetpe

  authored and

  Tomasz Arendt

  committed
  49328ac

• Fixes to task names

  

  erzetpe

  authored and

  Tomasz Arendt

  committed
  3026815

• Fix issues with starting service with UI turned off and config UI setting

  

  erzetpe

  authored and

  Tomasz Arendt

  committed
  f01337b

• add tls support for vault

  

  Tomasz Arendt

  committed
  d1ed79b

• fixes

  

  Tomasz Arendt

  committed
  930ddbc

• Add Vault offline installation (#1371)

  

  erzetpe

  authored and

  Tomasz Arendt

  committed
  c9c58c6

• Fixes after code review

  

  erzetpe

  authored and

  Tomasz Arendt

  committed
  51f9655

• Change hardcoded policy files to templates

  

  erzetpe

  authored and

  Tomasz Arendt

  committed
  ac105e2

• Fix issue with token path

  

  erzetpe

  authored and

  Tomasz Arendt

  committed
  2eebe5f

• Vault: Update shell scripts

  Show description for 3c82e95
  

  to-bar

  authored and

  Tomasz Arendt

  committed
  3c82e95

• Changes after review

  

  to-bar

  authored and

  Tomasz Arendt

  committed
  d9e5a84

• vault audit empty list status code ignored

  

  Tomasz Arendt

  committed
  ed5a000

• - Added vault for single machine installation.

  seriva

  committed
  9e3a0fd

Commits on Jun 23, 2020

• fix offline vault helm installation

  

  Tomasz Arendt

  committed
  8ffb5f9

Commits on Jun 24, 2020

• fix offline vault installation and custom values bug

  

  Tomasz Arendt

  committed
  711a654

Commits on Jun 25, 2020

• vault: adding proper fix for the "new cluster problem" (#1384)

  sk4zuzu

  authored
  30c1fa3

• vault selfsigned cert parametrized in config

  

  Tomasz Arendt

  committed
  3ff84bb

• cault selfsigned cert set country US

  

  Tomasz Arendt

  committed
  3904fc9