You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Mark Anderson c6ff4ba7d8 Support vault namespaces in connect CA (#12904) ... * Support vault namespaces in connect CA Follow on to some missed items from #12655 From an internal ticket "Support standard "Vault namespace in the path" semantics for Connect Vault CA Provider" Vault allows the namespace to be specified as a prefix in the path of a PKI definition, but our usage of the Vault API includes calls that don't support a namespaced key. In particular the sys.* family of calls simply appends the key, instead of prefixing the namespace in front of the path. Unfortunately it is difficult to reliably parse a path with a namespace; only vault knows what namespaces are present, and the '/' separator can be inside a key name, as well as separating path elements. This is in use in the wild; for example 'dc1/intermediate-key' is a relatively common naming schema. Instead we add two new fields: RootPKINamespace and IntermediatePKINamespace, which are the absolute namespace paths 'prefixed' in front of the respective PKI Paths. Signed-off-by: Mark Anderson <manderson@hashicorp.com>		3 years ago
..
common.go	ca: cleanup validateSetIntermediate	3 years ago
mock_Provider.go	chore: upgrade mockery to v2 and regenerate (#12836)	3 years ago
provider.go	Support vault namespaces in connect CA (#12904)	3 years ago
provider_aws.go	ca/provider: remove ActiveRoot from Provider	3 years ago
provider_aws_test.go	ca/provider: remove ActiveRoot from Provider	3 years ago
provider_consul.go	ca: cleanup validateSetIntermediate	3 years ago
provider_consul_config.go	…
provider_consul_test.go	ca/provider: remove ActiveRoot from Provider	3 years ago
provider_test.go	Vendor in rpc mono repo for net/rpc fork, go-msgpack, msgpackrpc. (#12311)	3 years ago
provider_vault.go	Support vault namespaces in connect CA (#12904)	3 years ago
provider_vault_test.go	Fix leaked Vault LifetimeRenewers (#12607)	3 years ago
testing.go	ca: require that tests that use Vault are named correctly	3 years ago