Commit Graph
83 Commits
Author SHA1 Message Date
Tuan Dang a9a16c9bd1 Begin work on ssh host groups 2025-04-29 13:39:24 -07:00
Maidul Islam e9aa8b317b Merge branch 'main' into feat/assume-role 2025-04-28 06:33:26 -07:00
= 7219ba3b46 feat: implemented user role impersonation 2025-04-21 18:43:21 +05:30
Tuan Dang 0265665e83 Make infisical ssh v2 work in non-interactive mode, allow reassignment of default ssh cas 2025-04-17 22:35:25 -07:00
Sheen 0f7e8585dc Merge pull request #3391 from Infisical/feat/add-metadata-based-permissions-for-dynamic-secret
feat: add metadata based permissions for dynamic secret
2025-04-16 04:28:52 +08:00
Daniel Hougaard 966ca1a3c6 Merge pull request #3357 from Infisical/daniel/kms-sign-verify
feat(kms): sign & verify data
2025-04-13 22:22:23 +04:00
Sheen Capadngan 19b0cd9735 feat: update dynamic secret permissioning 2025-04-12 01:47:33 +08:00
Tuan Dang edf375ca48 Bring back ssh host read permission 2025-04-10 21:48:25 -07:00
Tuan Dang 264177638f Address greptile suggestions 2025-04-10 16:45:24 -07:00
Tuan Dang 77dd768a38 Fix merge conflicts 2025-04-10 12:39:09 -07:00
Sheen Capadngan 07898414a3 feat: add metadata based permissions for dynamic secret 2025-04-11 00:20:02 +08:00
Tuan Dang 2382937385 Add configure sshd flag to infisical ssh add-host command, update issue user cert permissioning 2025-04-09 14:41:10 -07:00
Daniel Hougaard ac0f4aa8bd Merge branch 'heads/main' into daniel/kms-sign-verify 2025-04-10 01:12:13 +04:00
Tuan Dang 20ebfcefaa Update permission logic 2025-04-08 18:45:16 -07:00
Tuan Dang 728c3f56a7 Add rbac permissioning support for ssh hosts, render access tree for secrets projects only 2025-04-08 14:56:05 -07:00
Tuan Dang b8f04d6738 preliminary ssh host structs, api, ui 2025-04-05 22:25:06 -07:00
Daniel Hougaard c6ca668db9 feat(kms): sign & verify data 2025-04-03 07:17:29 +04:00
Scott Wilson 766c1242fd feature secret rotations v2 2025-03-31 20:34:48 -07:00
Sheen Capadngan 956d0f6c5d misc: review comments 2025-03-27 12:17:36 +08:00
Sheen Capadngan 1b05b7cf2c Merge remote-tracking branch 'origin/main' into misc/privilege-management-v2-transition 2025-03-11 15:48:01 +08:00
Daniel Hougaard c7414e00f9 chore: rolled back service token permission changes 2025-03-11 07:11:14 +04:00
Daniel Hougaard 78c349c09a fix(view-secret-value): requested changes 2025-03-11 00:31:21 +04:00
Daniel Hougaard f1ba64aa66 fix(view-secret-value): backwards compatibility for read 2025-03-11 00:08:59 +04:00
Daniel Hougaard 97567d06d4 Revert "Revert "feat(api/secrets): view secret value permission"" 2025-03-11 00:07:47 +04:00
Sheen Capadngan 2b7e1b465f misc: updated project rbac fe 2025-03-08 04:10:06 +08:00
Sheen Capadngan 5ed164de24 misc: project permission transition 2025-03-07 01:33:29 +08:00
Maidul Islam bf6cfbac7a Revert "feat(api/secrets): view secret value permission" 2025-03-05 14:15:02 -05:00
Daniel Hougaard 4b3efb43b0 fix: view secret value permission (requested changes) 2025-03-05 22:47:40 +04:00
Daniel Hougaard 77e1ccc8d7 fix: view secret value permission (requested changes) 2025-03-05 22:47:40 +04:00
Daniel Hougaard 9cb1a31287 fix: allow Viewer role to read value 2025-03-05 22:47:40 +04:00
Daniel Hougaard f28f4f7561 fix: requested changes 2025-03-05 22:47:40 +04:00
Daniel Hougaard 4a66395ce6 feat(api): view secret value, WIP 2025-03-05 22:47:39 +04:00
Sheen Capadngan 8e2cce865a Merge remote-tracking branch 'origin/main' into feat/kmip-client-management 2025-02-18 02:50:12 +08:00
Maidul Islam f0b6382f92 Revert "Revert "Root encrypted data to kms encryption"" 2025-02-11 22:41:32 -05:00
Maidul Islam 25f6947de5 Revert "Root encrypted data to kms encryption" 2025-02-11 11:16:30 -05:00
= cbbafcfa42 feat: completed org migration in kms and updated to remove orgDAL functions 2025-02-10 15:46:38 +05:30
Sheen Capadngan a3acfa65a2 feat: finished up client cert generation 2025-02-07 01:24:32 +08:00
Sheen Capadngan 8b315c946c feat: added kmip to project roles section 2025-02-04 19:29:34 +08:00
Sheen Capadngan c7f80f7d9e feat: kmip client backend setup 2025-02-04 01:34:30 +08:00
= cffcb28bc9 feat: removed secret path check in glob 2025-01-29 17:50:02 +05:30
= a6145120e6 feat: added validation for secret path in permission 2025-01-29 17:01:45 +05:30
Scott Wilson 3c1fc024c2 improvements: address feedback 2025-01-20 22:17:20 -08:00
Scott Wilson 473efa91f0 feature: secret sync base + aws parameter store & github 2025-01-15 21:52:50 -08:00
Tuan Dang f5920f416a Merge remote-tracking branch 'origin' into ssh-certs 2024-12-10 12:46:14 -08:00
Tuan Dang 7cf297344b Move ssh back to project level 2024-12-09 21:36:42 -08:00
= 3c63312944 feat: added identity id condition in identity permission of a project 2024-12-04 21:26:23 +05:30
= 7317dc1cf5 feat: modified error handler to return possible rules for a validation failed rules 2024-11-20 22:50:21 +05:30
= 64f43e59d0 feat: fixed missing secret folder and import permission in service token 2024-10-31 01:17:41 +05:30
= 58ce623a2c feat: removed console and resolved drift in tf due to folder removing in v1 2024-10-25 00:59:41 +05:30
= a1397f0a66 fix: resolved edge case in folder empty action 2024-10-25 00:59:38 +05:30