upstream/vault
1
0
Fork 0
mirror of https://github.com/hashicorp/vault.git synced 2026-03-21 01:50:57 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions 11
vault/command
History
Jeff Mitchell f3f30022d0 Add forced revocation. 
In some situations, it can be impossible to revoke leases (for instance,
if someone has gone and manually removed users created by Vault). This
can not only cause Vault to cycle trying to revoke them, but it also
prevents mounts from being unmounted, leaving them in a tainted state
where the only operations allowed are to revoke (or rollback), which
will never successfully complete.

This adds a new endpoint that works similarly to `revoke-prefix` but
ignores errors coming from a backend upon revocation (it does not ignore
errors coming from within the expiration manager, such as errors
accessing the data store). This can be used to force Vault to abandon
leases.

Like `revoke-prefix`, this is a very sensitive operation and requires
`sudo`. It is implemented as a separate endpoint, rather than an
argument to `revoke-prefix`, to ensure that control can be delegated
appropriately, as even most administrators should not normally have
this privilege.

Fixes #1135
2016-03-03 10:13:59 -05:00
..
server Merge branch 'master' into f-disable-tls 2015-12-29 12:59:02 -05:00
test-fixtures command: load configuration 2015-03-30 10:25:24 -07:00
token Make TokenHelper an interface and split exisiting functionality 2015-12-22 10:23:30 -05:00
audit_disable.go command: source general options docs from common source 2015-06-30 12:01:23 -07:00
audit_disable_test.go command/audit-disable 2015-04-07 18:23:50 -07:00
audit_enable.go command: source general options docs from common source 2015-06-30 12:01:23 -07:00
audit_enable_test.go command/audit-enable 2015-04-07 22:42:04 -07:00
audit_list.go command: source general options docs from common source 2015-06-30 12:01:23 -07:00
audit_list_test.go command/audit-list 2015-04-07 18:19:44 -07:00
auth.go Using LookupSelf() API method instead of raw HTTP call for auth command 2015-12-28 01:38:00 +00:00
auth_disable.go command: source general options docs from common source 2015-06-30 12:01:23 -07:00
auth_disable_test.go command/auth-disable 2015-04-01 17:14:11 -07:00
auth_enable.go Fixing auth-enable help text 2016-02-21 14:54:50 -06:00
auth_enable_test.go command/server: tests 2015-04-04 17:43:20 -07:00
auth_test.go Make TokenHelper an interface and split exisiting functionality 2015-12-22 10:23:30 -05:00
command_test.go command/revoke: revoke 2015-03-31 19:21:02 -07:00
config.go Make TokenHelper an interface and split exisiting functionality 2015-12-22 10:23:30 -05:00
config_test.go command: load configuration 2015-03-30 10:25:24 -07:00
delete.go command: source general options docs from common source 2015-06-30 12:01:23 -07:00
delete_test.go command/delete 2015-04-07 11:15:20 -07:00
format.go Fix CLI formatter to show warnings again on CLI list output. 2016-02-24 21:45:58 -05:00
format_test.go Fix CLI formatter to show warnings again on CLI list output. 2016-02-24 21:45:58 -05:00
generate-root.go Return status for rekey/root generation at init time. This mitigates a 2016-02-12 14:24:36 -05:00
generate-root_test.go Fix test on 1.6 by comparing to nil instead of a nil-defined map 2016-01-22 21:26:06 -05:00
init.go add missing verb 2016-02-26 14:43:56 +01:00
init_test.go Add -check flag to init. 2016-01-22 13:06:40 -05:00
key_status.go command: source general options docs from common source 2015-06-30 12:01:23 -07:00
key_status_test.go command/key-status: Adding new key-status command 2015-05-27 18:17:02 -07:00
list.go On the CLI, ensure listing ends with /. 2016-02-03 21:08:46 -05:00
list_test.go Only allow listing on folders and enforce this. Also remove string sorting from Consul backend as it's not a requirement and other backends don't do it. 2016-01-22 10:07:32 -05:00
meta.go Make TokenHelper an interface and split exisiting functionality 2015-12-22 10:23:30 -05:00
meta_test.go Move environment variable reading logic to API. 2015-11-04 10:28:00 -05:00
mount.go Switch per-mount values to strings going in and seconds coming out, like other commands. Indicate deprecation of 'lease' in the token backend. 2015-09-25 10:41:21 -04:00
mount_test.go command/mount 2015-03-31 16:29:04 -07:00
mounts.go Switch per-mount values to strings going in and seconds coming out, like other commands. Indicate deprecation of 'lease' in the token backend. 2015-09-25 10:41:21 -04:00
mounts_test.go command/meta: tests passing 2015-03-30 23:30:30 -07:00
mounttune.go Fix mount-tune CLI output 2015-10-09 16:03:31 -04:00
path_help.go command: source general options docs from common source 2015-06-30 12:01:23 -07:00
path_help_test.go command/path-help: rename command, better error if sealed. Fixes #234 2015-06-18 15:56:42 -07:00
pgp_test.go Add the ability to generate root tokens via unseal keys. 2016-01-19 18:28:10 -05:00
policy_delete.go fix typo 2016-03-01 11:48:17 -05:00
policy_delete_test.go command/policy-delete 2015-04-19 16:36:11 -07:00
policy_list.go command: source general options docs from common source 2015-06-30 12:01:23 -07:00
policy_list_test.go command/policies: read a single policy 2015-04-01 18:50:43 -07:00
policy_write.go command: source general options docs from common source 2015-06-30 12:01:23 -07:00
policy_write_test.go command/policy-write 2015-04-01 23:00:15 -07:00
read.go Updates and documentation 2016-01-22 10:07:32 -05:00
read_test.go Updates and documentation 2016-01-22 10:07:32 -05:00
rekey.go add missing verb 2016-02-26 14:43:56 +01:00
rekey_test.go Allow ASCII-armored PGP pub keys to be passed into -pgp-keys. 2016-01-18 17:01:52 -05:00
remount.go Rejig how dynamic values are represented in system view and location of some functions in various packages; create mount-tune command and API analogues; update documentation 2015-09-10 15:09:54 -04:00
remount_test.go command/remount 2015-04-07 10:46:47 -07:00
renew.go Allow to output secrets in YAML format 2015-12-10 11:32:31 +01:00
renew_test.go command/renew 2015-04-13 20:42:07 -07:00
revoke.go Add forced revocation. 2016-03-03 10:13:59 -05:00
revoke_test.go Replace VaultID with LeaseID for terminology simplification 2015-04-08 13:35:32 -07:00
rotate.go command: source general options docs from common source 2015-06-30 12:01:23 -07:00
rotate_test.go command/rotate: Adding new rotate command 2015-05-28 10:16:33 -07:00
seal.go command: source general options docs from common source 2015-06-30 12:01:23 -07:00
seal_test.go command/seal: test should use the token 2015-03-31 11:46:55 -07:00
server.go Allow specifying an initial root token ID in dev mode. 2016-03-02 12:03:26 -05:00
server_test.go Fix build tag 2016-02-03 08:41:31 -05:00
ssh.go Merge pull request #1099 from hashicorp/fix-ssh-cli 2016-02-19 13:02:34 -05:00
ssh_test.go Remove use of os/user as it cannot be run with CGO disabled 2015-10-02 18:43:38 -07:00
status.go Update documentation for status command to reflect new return codes 2016-02-08 11:36:08 -05:00
status_test.go Fix command status test with new return value 2016-01-29 19:31:01 -05:00
token_create.go Allow to output secrets in YAML format 2015-12-10 11:32:31 +01:00
token_create_test.go command/token-create: provide more useful output. Fixes #337 2015-06-17 16:59:50 -07:00
token_lookup.go Make token-lookup functionality available via Vault CLI 2015-12-29 20:18:59 +00:00
token_lookup_test.go Make token-lookup functionality available via Vault CLI 2015-12-29 20:18:59 +00:00
token_renew.go Address review feedback 2016-03-01 20:25:40 -05:00
token_renew_test.go Allow token-renew to not be given a token; it will then use the 2016-03-01 17:02:48 -05:00
token_revoke.go command: source general options docs from common source 2015-06-30 12:01:23 -07:00
token_revoke_test.go command/token-revoke 2015-04-07 14:36:17 -07:00
unmount.go Fix unmount help output 2015-11-09 15:23:49 -05:00
unmount_test.go command/unmount 2015-04-07 10:38:51 -07:00
unseal.go Add reset support to the unseal command. 2015-10-28 15:59:39 -04:00
unseal_test.go command/unseal: can accept key from command-line 2015-04-12 18:39:41 -07:00
version.go Print version on startup. 2015-11-09 13:52:55 -05:00
version_test.go command: version test 2015-03-03 23:14:54 -08:00
write.go help sentence improved 2016-02-22 09:38:30 -06:00
write_test.go command/write: adding force flag for when no data fields are necessary. Fixes #357 2015-06-18 13:51:06 -07:00