* Initial check-in of wildcard to get all secrets in path (Issue#234)
* Fix wildcard for K/V v2 and Cubbyhole. Add more tests
* Refactored out selectAndAppendResults
* Use selectAndAppendResults for wildcard
* Use normalizeOutputKey in action.js
* Refactored wildcard
---------
Co-authored-by: Scott Lemme <[email protected]>
Co-authored-by: Lemme <[email protected]>
* fix secrets stored in JSON format
* add more tests
* fix lint and pass token to build
* add test cases
* add debug
* fix ordering of build steps
* fix test string format
* update test check
* fix test string format
* final cleanup
* remove comment
* remove unused var assignment
* simplify more
* simplify code and add more comments
* fix secrets in json format
* fix actionlint
* add more comments and docs
* revert build.yml test
* add test for json
* fix selector
* fix e2e test
* fix e2e test 2
* remove test
* remove isNaN check
* update changelog
* feat: Always allow scoped access to vault token through outputs
* Make optional instead of always, in case of untrusted steps
---------
Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: Thomas <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* Set output for the error message
In the event vault-action throws an error, the error message is
sent to the workflow log when with core.setFailed, but that output
is not accessible to other steps in the workflow.
This change sets an output for the error message, called errorMessage,
than can be read by other steps within the workflow and parsed.
* Add hashicorp/vault-action#446 to improvements in CHANGELOG
* fix(auth): added approle test in basic integration
* feat(auth): adding userpass and and ldap auth
* chore(changelog): added support for userpass and ldap auth
* make "role" input optional
Per Vault documentation it doesn't have to be provided,
and the auth provider's "default_role" parameter is required
precisely for this case.
https://www.vaultproject.io/api/auth/jwt
* chore: make vault action consumable
* fix prefixless queries to default to data
* fix the right build entrypoint
* make output more forgiving and shore up selectors
* clarify doc language
* add npmtoken
* feat: add generic auth
Adds the ability to authenticate against any normal Vault endpoint by added the `authPayload` input.
When an unrecognized method is provided, the action will attempt to hit `v1/auth/<method>/login` with the provided `authPayload and parse out the token in the response
