Googlom
0c41f9c141
fix deadlock and add more logging ( #5160 )
2024-10-24 14:08:09 +05:00
Googlom
7b7ba77436
modify logging ( #5158 )
2024-10-23 17:32:37 +05:00
Anil Keshav
3ad2628095
feat(vault): not allowing batch token revoke ( #4918 )
...
* not allowing batch token revoke
* chaging values to hold variable name
* error message when identifying service token
* refactor
---------
Co-authored-by: Googlom <alimovgb@gmail.com>
2024-10-22 13:50:32 +05:00
Googlom
5c47be3f8f
refactor(vault): Refactor vault package ( #5148 )
...
* move to old package
* go mod
* remove old
* refactor done
* Update pkg/vault/oidc.go
Co-authored-by: Christopher Fenner <26137398+CCFenner@users.noreply.github.com>
* commit suggestions
Co-authored-by: Christopher Fenner <26137398+CCFenner@users.noreply.github.com>
* commit suggestions
Co-authored-by: Christopher Fenner <26137398+CCFenner@users.noreply.github.com>
* commit suggestions
---------
Co-authored-by: Christopher Fenner <26137398+CCFenner@users.noreply.github.com>
2024-10-22 13:29:34 +05:00
Googlom
af05acad58
feat(events): Publish events to GCP PubSub by each step ( #5122 )
...
* test
* test
* draft
* generator
* some polishing
* go mod tidy
* fix unit
* fix unit
* fix unit
* fix unit
* fix unit
* resolve review comments
* resolve review comments
* add debug message on successful publish
* refactor to use global vault client
* cleanup
* rename
* clenup
* refactor
* remove token revocation
* handle nil vaultClient and add comments
* feat(events): Publish events (generated part) (#5131 )
* add generated
* add generated
* refactor vaultClient usage
* fix unit tests
* fix unit tests
* fix
2024-10-11 14:55:39 +05:00
Pavel Busko
72ff2d461b
feat(vault): support complex data types in secrets ( #5006 )
...
Co-authored-by: Ralf Pannemans <ralf.pannemans@sap.com>
2024-09-05 10:29:19 +02:00
Jordi van Liempt
f5fbb7e9d9
feat(vault): Facilitate Vault OIDC token ( #4916 )
...
* add functionality to retrieve Vault OIDC token
* fix tests for now
* update error
Co-authored-by: Christopher Fenner <26137398+CCFenner@users.noreply.github.com>
* implement commented tests
* run mockery for config pkg
---------
Co-authored-by: jliempt <>
Co-authored-by: Christopher Fenner <26137398+CCFenner@users.noreply.github.com>
2024-05-07 12:19:39 +00:00
Googlom
33b8c489f9
fix dependencies with security issues ( #4790 )
...
* remove vault interaction from unit tests
* go mod tidy
* update some dependency minor versions
* update github.com/getsentry/sentry-go
* fix vault dependency
* update google.golang.org/api and cloud.google.com/go/storage
* fix unit test
---------
Co-authored-by: Gulom Alimov <gulomjon.alimov@sap.com>
2024-01-24 15:19:23 +05:00
Jordi van Liempt
d05b53cccd
fix(Vault): retry Vault request (EOF) errors ( #4620 )
...
* retry Vault request errors and add extensive logging
* fix sigsegv and change logging
* refining logs
* changing debug to info
---------
Co-authored-by: jliempt <>
Co-authored-by: Muhammadali Nazarov <muhammadalinazarov@gmail.com>
2023-10-19 14:34:03 +02:00
Christopher Fenner
20e1fb53aa
chore(vault): structure vault logs ( #4627 )
...
* structure vault logs
* Update client.go
2023-10-11 10:14:31 +02:00
Jordi van Liempt
5a56726bde
Revert "chore(vault): custom retry check function ( #4475 )" ( #4616 )
...
This reverts commit 2ab1e2a1bc19dff514c3ea8f2a2ab61bc59a50cf.
2023-10-06 10:22:45 +02:00
Jk1484
2ab1e2a1bc
chore(vault): custom retry check function ( #4475 )
...
* vault retry check function
---------
Co-authored-by: I557621 <jordi.van.liempt@sap.com>
2023-09-26 11:57:36 +05:00
Jk1484
ffc931aad1
feat(golangBuild): use 'unit' build tag to include tests during test execution ( #4345 )
...
* Added unit tag as argument. Added description to runTests command. Changed code generator to have unit build tag in generated unit test files.
* Added unit build tag to all unit test files.
* added to new unit test unit build tag
* Update verify-go.yml
* small fix
---------
Co-authored-by: Muhammadali Nazarov <Muhammadali.Nazarov@acronis.com>
Co-authored-by: Christopher Fenner <26137398+CCFenner@users.noreply.github.com>
2023-05-03 21:02:11 +05:00
Christopher Fenner
51feacadbf
chore: align Vault naming ( #3372 )
...
* Align Vault naming
* remove duplicate debug output
* correct message
* align vault naming
* Update vault.md
2021-12-21 11:52:10 +01:00
Siarhei Pazdniakou
0673d3fed6
Writing secrets to vault ( #2770 )
...
Co-authored-by: Kevin Stiehl <kevin.stiehl@numericas.de>
Co-authored-by: Oliver Nocon <33484802+OliverNocon@users.noreply.github.com>
2021-05-06 10:27:23 +02:00
Kevin Stiehl
f2b0683880
add token revocation ( #2686 )
...
* add token revocation
* update mocks
Co-authored-by: Oliver Nocon <33484802+OliverNocon@users.noreply.github.com>
2021-03-10 08:36:50 +01:00
Kevin Stiehl
ffffe8295e
(Vault) Improvements ( #2439 )
...
* vault improvements
* Update cloudFoundryDeploy.yaml
remove double PARAMETERS
* go generate
* fix type & resturcutre paragraph to a list
* remove non-existent secrets
* build trigger
Co-authored-by: Christopher Fenner <26137398+CCFenner@users.noreply.github.com>
2021-02-15 09:48:51 +01:00
Kevin Stiehl
dfab156427
Feature/approle secret id rotation ( #2311 )
...
* add new step vault secret
* add debug log
Co-authored-by: Oliver Nocon <33484802+OliverNocon@users.noreply.github.com>
2020-11-17 13:49:31 +01:00
Marcus Holl
14e1c44aae
Avoid having the mocks in the productive binary ( #2199 )
2020-10-21 12:48:26 +02:00
Kevin Stiehl
3eae0c5f68
feat(vault): fetch secrets from vault ( #2032 )
...
* cloud-foundry & sonar from vault
* add vault development hint
* don't abort on vault errors
* cloudfoundry make credentialsId only mandatory when vault is not configured
* add vault ref to step ymls
* rename vaultAddress to vaultServerUrl
* rename PIPER_vaultRole* to PIPER_vaultAppRole*
* add resourceRef for detect step
* fix error when no namespace is set
* added debug logs
* added debug logs
* fix vault resolving
* add vaultCustomBasePath
* rename vault_test.go to client_test.go
* refactored vault logging
* refactored config param lookup for vault
* added tüddelchen
* rename vaultCustomBasePath to vaultPath
* fix tests
* change lookup path for group secrets
* fix interpolation tests
* added vault resource ref to versioning
* execute go generate
* rename Approle to AppRole
* change verbose back to false
Co-authored-by: Leander Schulz <leander.schulz01@sap.com>
Co-authored-by: Christopher Fenner <26137398+CCFenner@users.noreply.github.com>
2020-10-13 14:14:47 +02:00
Kevin Stiehl
d589038206
Vault AppRole login ( #1971 )
...
* added interpolation package in config
* vault allow paths to hold config references
* allow referencing properties in vaultPaths
* fix small typo
* add approleAuth
* register resolved secrets to logger
* generate steps
* clean up
* add integration test
* add vault to context filter
* reduce Cognitive Complexity & added tests
* Update pkg/config/stepmeta_test.go
Co-authored-by: Oliver Nocon <33484802+OliverNocon@users.noreply.github.com>
* go generate
* go generate after merge
* rename VaultAppRole* to VaultRole*
Co-authored-by: Oliver Nocon <33484802+OliverNocon@users.noreply.github.com>
2020-09-16 14:50:09 +02:00
Kevin Stiehl
116a91ce28
Fetch config parameters from vault ( #1782 )
...
* added secret fetching from vault
* added rootPath and vault namespaces
* write tests for vault config loading
* fix smaller bugs
* rename rootPath to basePath
* fix integration test
* make basePath optional
* write more tests
* remove unnecessary code
* make basePath configurable
* remove mixin for vault
* rewrite tests
* fix tests for searching over multiple paths
Co-authored-by: Oliver Nocon <33484802+OliverNocon@users.noreply.github.com>
2020-07-22 11:15:48 +02:00
Kevin Stiehl
644f18b491
feat(vault): Added package to get secrets from vault ( #1763 )
...
* Added Vault package
* added support for logical path lookups instead of api paths
* added integration tests
* add integration tests and mock tests
* Replace mock with mockery generated one
* update tests to use mockery
* create mocks sub package
2020-07-08 08:20:15 +02:00
