5
0
Fork 0
mirror of https://github.com/hashicorp/vault-action.git synced 2025-11-11 00:56:54 +00:00
Commit graph

60 commits

Author SHA1 Message Date
Keith Murry
2c6158aeef Introduce jwt Issued At
If time drift occurs between the identity provider and the Hashi Vault, authentication will fail.  This is resolved by introducing a param to specify the number of seconds in the past for the jwt issued date
2024-02-12 13:10:18 -06:00
John-Michael Faircloth
efab57ede0
feature: add ignoreNotFound option (#518)
* add ignoreNotFound option

* update README
2024-02-01 08:42:56 -06:00
Max Winslow
00bce0da9c
Add path parameter example (#511)
* x

* Update README.md

Co-authored-by: John-Michael Faircloth <fairclothjm@users.noreply.github.com>

---------

Co-authored-by: John-Michael Faircloth <fairclothjm@users.noreply.github.com>
2024-01-03 14:11:01 -06:00
John-Michael Faircloth
45dc5344f1
Update README.md (#510) 2023-12-21 11:14:42 -06:00
John-Michael Faircloth
4727f0b168
chore: update readme reference for readability (#497) 2023-10-23 13:46:51 -05:00
Mike F
a5f6c67fe1
Update README.md (#491) 2023-09-15 16:09:04 -04:00
keattang
d9197ec2d2
Implemented wildcard selector (based on #238) (#488)
* Initial check-in of wildcard to get all secrets in path (Issue#234)
* Fix wildcard for K/V v2 and Cubbyhole.  Add more tests
* Refactored out selectAndAppendResults
* Use selectAndAppendResults for wildcard
* Use normalizeOutputKey in action.js
* Refactored wildcard

---------

Co-authored-by: Scott Lemme <68233981+slemme1@users.noreply.github.com>
Co-authored-by: Lemme <slemme@massmutual.com>
2023-09-15 08:56:07 -04:00
John-Michael Faircloth
b9f4d16071
fix secrets stored in json format (#466)
* fix secrets in json format

* fix actionlint

* add more comments and docs

* revert build.yml test

* add test for json

* fix selector

* fix e2e test

* fix e2e test 2

* remove test

* remove isNaN check

* update changelog
2023-06-21 11:55:50 -05:00
John-Michael Faircloth
ec2980c187
chore: update jira teams and add actionlint (#465)
* chore: update jira teams and add actionlint

* update local test to workflow_dispatch

* define outputs

* try actionlint's skip_outputs setting

* move skip_outputs to action definition in tests

* move skip_outpus to action.yml

* remove skip_outputs

* move outputs

* call actionlint directly to pass args

* try to fix quoting

* truncate ignore

* try escaping

* add comment
2023-06-12 14:58:04 -05:00
TomNorth
cd5a8995f3
Scoped token access (#441)
* feat: Always allow scoped access to vault token through outputs
* Make optional instead of always, in case of untrusted steps
---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: Thomas <thomas.north@dazn.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-05-19 14:11:33 -04:00
Max Coulombe
72c092c8af
* document that the selector uses JSONata (#455) 2023-05-19 13:24:23 -04:00
Sai Pranav
d1655aec40
chore(readme): adding readme for #440 (#444) 2023-05-19 09:17:46 -04:00
Max Coulombe
3a9100e7d5
Enhanced "Example Usage" section (#435)
+added documentation on how to use the retrieved secrets
+ added an example of converting the vault-action outputs to json
* fix e2e test setup
2023-03-02 16:06:42 -05:00
Max Coulombe
3bbbc68bd0
Development flow enhancements (#430)
+ added a contribution section to the readme
+ added a local workflow to test changes
+ made the vault token configurable for tests
* bumped action/checkout
2023-02-28 15:28:33 -05:00
Theron Voran
1f8e723e55
change example to vault-action@v2 (#391)
so we don't have to keep remembering to update the version tag in the
readme.
2022-10-26 11:48:17 -07:00
Prakash Manglanathan
4aed62f922
Updated the version in Readme doc. (#303)
The Sample code provided in the readme doesn't work as expected unless the version has been updated to 2.4.0.
2022-04-07 16:42:18 -07:00
Kevin Schoonover
c14a190aaa
feat(): make secrets parameter optional (#299) 2022-04-07 14:10:23 +01:00
Joonas Venäläinen
843e7fa30a
fix(docs): Fix bound_audience example url in Github OIDC Token section (#302) 2022-04-04 10:11:40 +01:00
Rosemary Wang
876cdcfdd3
Update docs with GitHub OIDC token configuration (#301) 2022-03-28 09:23:28 -07:00
Alex Kulikovskikh
c502100fbe
feat(): add support for github provided jwt auth (#257)
* fix: update `privateKeyRaw` condition

* fix: add `contents: read` permission

* fix: get token via `@actions/core`

- Update README
- Switch to use `getIDToken` method for Github token retrieval
- Bump `@actions/core` to 1.6.0
- Add `jwtGithubAudience` input
- Remove unnecessary code

* fix: add description for `jwtGithubAudience`

* fix: move default value for `jwtGithubAudience` to `action.yml`

* docs: fix typo in README & grammar

* test: add tests

* fix: reset `dist/index.js`

* fix: remove default value for `jwtGithubAudience` from `action.yml`

* fix: reset `dist/index.js`

* fix: reset `dist/index.js`
2021-10-08 09:46:21 -07:00
Theron Voran
d5a69ceca1
Update to v2.3.1 (#242) 2021-08-23 08:36:01 -07:00
Theron Voran
0451f06f9f
Update to v2.3.0 (#231) 2021-06-23 14:03:57 -07:00
Falcon Taylor-Carter
72c7a899ca
Implement kubernetes auth / Add customizable auth path (#218)
* Implement kubernetes auth / Add customizable auth path

* Fix typo

* Apply suggestions from code review

Co-authored-by: Jason O'Donnell <2160810+jasonodonnell@users.noreply.github.com>

Co-authored-by: Jason O'Donnell <2160810+jasonodonnell@users.noreply.github.com>
2021-06-03 10:59:51 -04:00
Jason O'Donnell
0cf3bd6a39
Update version in example doc (#215) 2021-05-06 14:27:48 -04:00
Raman Harnak
9e8f22534f
Implement JWT auth (#188) 2021-05-04 08:49:35 -04:00
Jason O'Donnell
937d792a86
Add GitHub authentication notice (#200)
* Add GitHub authentication notice

* Typo in perm name
2021-03-26 14:03:15 -04:00
Jason O'Donnell
5e5c06a3c8
Update to v2.1.2 (#180)
* Update to v2.1.2

* Update index.js
2021-01-21 14:45:22 -05:00
Jason O'Donnell
2fb78ab91e
Update to v2.1.1 (#168) 2020-12-15 11:55:39 -05:00
Jon L
6ac603b23e
bump readme to action v2.1.0 (#157) 2020-12-15 11:12:08 -05:00
ZANCO Bertrand
2f76ad395b
Add ability to export Vault Token (#127)
* Add export Vault Token

* Set correct condition for default value

* Add test for exportToken
Fix key with dash

* Restore index.js
2020-10-01 10:22:10 -04:00
Benjamin Rumble
b35ef16370
specify version (#122)
* specify version 

Without specifying `@v2.0.0` GitHub says the string is not the correct format

``` 
The workflow is not valid. .github/workflows/integration_tests.yml (Line: 10, Col: 15): Expected format {org}/{repo}[/path]@ref. Actual 'hashicorp/vault-action',Input string was not in a correct format.```

* v2.0.1

Co-authored-by: Jason O'Donnell <2160810+jasonodonnell@users.noreply.github.com>

Co-authored-by: Jason O'Donnell <2160810+jasonodonnell@users.noreply.github.com>
2020-09-22 13:44:55 -04:00
Jason O'Donnell
c8b383ee4e
Update doc for TLS (#103) 2020-08-12 11:53:00 -04:00
Jason O'Donnell
f7f0d5a289
Simplify secret request UX (#102)
* Simplify secret UX

* Update doc

* Fix tests
2020-08-11 10:06:28 -04:00
Justin Weissig
a2d854da53
Updated README.md
Minor spelling and grammar tweaks.
2020-07-31 14:33:00 -07:00
Jim Kalafut
d1321fc438
Update README.md 2020-07-31 14:17:53 -07:00
Jason O'Donnell
2f554c06ec Update README 2020-07-31 16:45:04 -04:00
Richard Simpson
a7527a3e8a
chore: make vault action consumable (#43)
* chore: make vault action consumable

* fix prefixless queries to default to data

* fix the right build entrypoint

* make output more forgiving and shore up selectors

* clarify doc language

* add npmtoken
2020-04-11 23:54:04 -05:00
Richard Simpson
567ec72c33 fix: document custom authentication method 2020-04-07 12:09:06 -05:00
Richard Simpson
5de02d5a14 docs: fix type 2020-04-03 12:34:34 -05:00
Richard Simpson
8845b5c724 docs: Actually mark required as required 2020-04-03 12:33:08 -05:00
Richard Simpson
c80d0b130c docs: Clean up output a bit 2020-04-03 12:30:03 -05:00
Richard Simpson
01bb0f9bc9 docs: add reference 2020-04-03 12:24:42 -05:00
Richard Simpson
675d33e3da
docs: add note about exportEnv option 2020-04-03 10:52:40 -05:00
Richard Simpson
795c9eddca feat: add github auth and cleanup docs a little
Adds the GitHub Authentication method
2020-03-31 11:56:54 -05:00
Richard Simpson
4561f9e26e docs: fix typo and clarify masking 2020-03-11 14:16:21 -05:00
Richard Simpson
cb2908ac94 docs: promote non-key syntax sections 2020-03-11 14:12:53 -05:00
Richard Simpson
198a7ed7d2 docs: add headers docs and toc 2020-03-11 14:11:13 -05:00
Richard Simpson
ec10b5e257 feat: add ability to retrieve secrets via ouputs 2020-02-20 11:13:47 -06:00
Richard Simpson
a884aa8e59
docs: clarify other engine support. 2020-02-05 16:37:16 -06:00
Richard Simpson
0188d9d223
feat: add support for (nearly) any engine (#15)
* feat: add support for (nearly) any engine

* cache response and fixup data depth logic

* use starting slash as non-kv sentinel value

* add tests for custom engines

* improve docs and add descriptor of generic support

* update dist
2020-02-05 16:33:12 -06:00