You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Mark Anderson c6ff4ba7d8 Support vault namespaces in connect CA (#12904) ... * Support vault namespaces in connect CA Follow on to some missed items from #12655 From an internal ticket "Support standard "Vault namespace in the path" semantics for Connect Vault CA Provider" Vault allows the namespace to be specified as a prefix in the path of a PKI definition, but our usage of the Vault API includes calls that don't support a namespaced key. In particular the sys.* family of calls simply appends the key, instead of prefixing the namespace in front of the path. Unfortunately it is difficult to reliably parse a path with a namespace; only vault knows what namespaces are present, and the '/' separator can be inside a key name, as well as separating path elements. This is in use in the wild; for example 'dc1/intermediate-key' is a relatively common naming schema. Instead we add two new fields: RootPKINamespace and IntermediatePKINamespace, which are the absolute namespace paths 'prefixed' in front of the respective PKI Paths. Signed-off-by: Mark Anderson <manderson@hashicorp.com>		3 years ago
..
ca	Support vault namespaces in connect CA (#12904)	3 years ago
authz.go	Fixup acl.EnterpriseMeta	3 years ago
authz_test.go	Remove ent checks from oss test	3 years ago
common_names.go	connect/ca: cease including the common name field in generated certs (#10424)	3 years ago
csr.go	ConnectCA.Sign gRPC Endpoint (#12787)	3 years ago
generate.go	ca: examine the full chain in newCARoot	3 years ago
generate_test.go	bulk rewrite using this script	3 years ago
parsing.go	ca: examine the full chain in newCARoot	3 years ago
sni.go	peering: Make Upstream peer-aware (#12900)	3 years ago
sni_test.go	Account for partition in SNI for gateways	3 years ago
testing_ca.go	split `pbcommon` to `pbcommon` and `pbcommongogo` (#12587)	3 years ago
testing_ca_test.go	bulk rewrite using this script	3 years ago
testing_spiffe.go	…
uri.go	auto-config: ensure the feature works properly with partitions (#11699)	3 years ago
uri_agent.go	Fixup acl.EnterpriseMeta	3 years ago
uri_agent_oss.go	Fixup acl.EnterpriseMeta	3 years ago
uri_agent_oss_test.go	re-run gofmt on 1.17 (#11579)	3 years ago
uri_service.go	Fixup acl.EnterpriseMeta	3 years ago
uri_service_oss.go	Fixup acl.EnterpriseMeta	3 years ago
uri_service_oss_test.go	re-run gofmt on 1.17 (#11579)	3 years ago
uri_signing.go	ca: accept only the cluster ID to SpiffeIDSigningForCluster	3 years ago
uri_signing_test.go	ca: accept only the cluster ID to SpiffeIDSigningForCluster	3 years ago
uri_test.go	auto-config: ensure the feature works properly with partitions (#11699)	3 years ago
x509_patch.go	connect/ca: cease including the common name field in generated certs (#10424)	3 years ago
x509_patch_test.go	connect/ca: cease including the common name field in generated certs (#10424)	3 years ago