Siddharth
7b5ae1cff6
Update plugin-portal.mdx ( #12681 )
2021-09-30 11:00:44 -07:00
Loann Le
3626210b57
Updated documentation: added new code example and reference ( #12693 )
...
* added new code example
* Update website/content/docs/concepts/auth.mdx
Co-authored-by: Yoko Hyakuna <yoko@hashicorp.com >
* Update website/content/docs/concepts/lease.mdx
Co-authored-by: Yoko Hyakuna <yoko@hashicorp.com >
* Update lease.mdx
* Update website/content/docs/concepts/lease.mdx
Co-authored-by: Yoko Hyakuna <yoko@hashicorp.com >
Co-authored-by: Yoko Hyakuna <yoko@hashicorp.com >
2021-09-30 10:46:01 -07:00
Jim Kalafut
4ef7b809c6
Highlight that password policies are defined in a namespace ( #12692 )
2021-09-30 09:41:45 -07:00
Theron Voran
a79b9e5c11
docs: vault-k8s-0.13.1 vault-helm-0.16.1 ( #12680 )
...
Vault K8s 0.13.1 and Vault Helm 0.16.1 updated the default Vault
image, so making the corresponding docs updates here.
2021-09-30 08:49:56 -07:00
Meggie
02bcfa4ed0
Updating website latest to 1.8.3 ( #12671 )
2021-09-29 15:10:15 -04:00
Scott Miller
c55e6b936d
Document transform batch reference field ( #12664 )
2021-09-29 13:20:39 -05:00
Michael Golowka
4b5dc72ce3
Update Azure secrets engine to use MS Graph ( #12629 )
2021-09-29 11:28:13 -06:00
jweissig
87c08220cb
docs: updated enterprise package name ( #12667 )
...
Updated docs to align with Enterprise package name.
2021-09-29 10:17:31 -04:00
Blake Covarrubias
272e8f78ff
docs: Remove permissive policies in Consul ACL examples ( #12454 )
...
The ACL policy examples documented on the Consul Storage Backend and
Consul Service Registration pages are too permissive. Both policies
unnecessarily grant agent:write and node:write access for all agents
within the Consul datacenter. When Consul is used solely for service
registration, `service:write` is only required permission.
This commit modifies the policy for the Consul Storage Backend to
remove node:write access, and changes agent:write to agent:read.
The policy on the Consul Service Registration page is updated to
remove all KV-related privileges, and solely grant the necessary
service:write permission.
2021-09-28 14:13:41 -07:00
Loann Le
c45db9d058
Documentation update: Added tuner parameters to the Sensitive information section ( #12655 )
...
* added tuner parameter to doc
* reworded the text
* updated text based on feedback
* fine-tuning sentence
* changed to relative links
2021-09-28 11:44:46 -07:00
Francisco Navarro Morales
939e9eeab2
Fix typo in command ( #12619 )
...
Add missing space after `cut -d`
2021-09-27 12:37:03 -07:00
Ben Ash
4d60f825df
fix: upgrade vault-plugin-auth-kubernetes ( #12633 )
...
* fix: upgrade vault-plugin-auth-kubernetes
- brings in the alias_name_source feature which allows for setting
alternate alias names based on the service accounts's namespace and
name
- document the seurity related aspects for the feature addition above.
2021-09-27 13:10:55 -04:00
Pav Mohan
20a0ad3508
docs : Update GoLang library link in docs ( #12567 )
...
Previous link was to outdated master branch, this one is to up-to-date main branch
2021-09-24 10:01:13 -07:00
mickael-hc
750a26f0b8
Update production hardening guidelines ( #12585 )
...
* Update production hardening guidelines
* Apply suggestions from code review
Co-authored-by: Jamie Finnigan <jfinnigan@hashicorp.com >
2021-09-23 14:37:42 -04:00
Mike Green
8ae96a353c
Add rotate-root cli ( #11192 )
2021-09-23 09:00:25 -07:00
aphorise
4aeab7e8c4
Docs: Seal pkcs11 updated example with actual hex slot reference and … ( #12530 )
...
* Docs: Seal pkcs11 updated example with actual hex slot reference and notes related to decimal conversion. Minor correction to **Note** area in 'lib' parameter above 'slot'.
* Docs: Seal pkcs11 slot note correction.
2021-09-22 16:55:20 -04:00
Kamal Mahmud
8e01668103
Add additional info on v1 KV engine ( #12522 )
...
Added information flag to enable v1 KV secret engine in dev mode
2021-09-22 13:31:46 -07:00
Nick Cabatoff
3ec6dc14df
Update telemetry docs to include HA forwarding metrics. ( #12611 )
2021-09-22 12:10:26 -04:00
Tom Proctor
664434ad69
Revert "Update installation.mdx ( #12516 )" ( #12571 )
...
This reverts commit ab5ad87945 .
2021-09-22 11:54:25 +01:00
Loann Le
a0c2e2476a
added browswer support ( #12587 )
2021-09-21 13:48:21 -07:00
Pratyoy Mukhopadhyay
cf45b2b947
[VAULT-3519] Return no_default_policy on token role read ( #12565 )
...
* [VAULT-3519] Return no_default_policy on token role read if set
* [VAULT-3519] Add changelog
* [VAULT-3519] Always return token_no_default_policy on role read
* Fix broken test
* Update role read response in docs
2021-09-21 09:53:08 -07:00
Tiernan
68065dfd98
Allow globbing dis/allowed_policies_glob in token roles ( #7277 )
...
* Add allowed_policies_glob and disallowed_policies_glob that are the same as allowed_policies and disallowed_policies but allow glob matching.
* Update changelog, docs, tests, and comments for (dis)allowed_token_glob token role feature.
* Improve docs and unit tests for auth/token role policy globbing.
2021-09-21 08:25:06 -07:00
Nick Cabatoff
cf2000c45f
Fix a couple of typos in the namespace api docs. ( #12593 )
2021-09-21 09:15:51 -04:00
Yoko Hyakuna
3f58f7c861
Add code snippet to demonstrate GCP auth in Go ( #12578 )
...
* Add code snippet to demonstrate GCP auth in Go
* Fix a grammatical error
2021-09-17 20:51:07 -07:00
Lukas Grossar
b882b8cac4
Update example responses for /sys/seal-status ( #9621 )
2021-09-17 09:38:36 -07:00
Pratyoy Mukhopadhyay
fdd7599551
Update token renew docs ( #12572 )
...
* Update docs for token renew api and cli
* Clarify api docs for renew/renew-self
* Update wording around periodic tokens
2021-09-16 16:54:46 -07:00
Theron Voran
cdecce0f7c
docs: vault-k8s 0.13.0 and vault-helm 0.16.0 ( #12573 )
2021-09-16 14:58:02 -07:00
Meggie
8c8cafdc20
Some docs notes (seal migration + go discover link) ( #12542 )
...
* Was confused by pre1.5.1 auto->auto note
* Helpful note on go-discover
2021-09-16 10:22:38 -04:00
Mitali Bisht
6f8a68779b
Added Artifactory secrets plugin ( #12528 )
...
* Added Artifactory secrets plugin
Added Artifactory secrets vault plugin under partner programs
* Update plugin-portal.mdx
2021-09-13 15:30:31 -07:00
divyapola5
94d4fdbc47
Enforce minimum cache size for transit backend ( #12418 )
...
* Enforce Minimum cache size for transit backend
* enfore minimum cache size and log a warning during backend construction
* Update documentation for transit backend cache configuration
* Added changelog
* Addressed review feedback and added unit test
* Modify code in pathCacheConfigWrite to make use of the updated cache size
* Updated code to refresh cache size on transit backend without restart
* Update code to acquire read and write locks appropriately
2021-09-13 16:44:56 -05:00
Aaditya S
dd19e12977
Fix typo in lease renew documentation ( #10651 )
...
The documentation for `renew` is showing the output for `revoke`.
2021-09-13 11:57:10 -07:00
Lukas Grossar
4dd6915c42
Add link to go-discover README to raft documentation ( #10679 )
2021-09-10 14:40:36 -07:00
John-Michael Faircloth
fd018b4f67
identity: fix identity token introspect doc ( #12531 )
2021-09-10 11:41:32 -05:00
Mike Green
aec9d1810d
add example for secret tuning ( #12503 )
2021-09-10 09:10:33 -07:00
Justin Weissig
c6d178d33c
docs: update packaging ( #12527 )
...
* docs: update packaging
Update language to support current enterprise packaging.
* Update performance-standby.mdx
2021-09-09 14:36:15 -07:00
Mike Green
22ea738f1d
Add link to integrated storage docs page for learn tutorial ( #12501 )
...
* Help find the learn tutorial
* Add common API path header and move learn link
@ncabatoff suggestion
2021-09-09 09:51:45 -07:00
Theron Voran
52ff9e0fda
docs: k8s auth issuer lookup ( #12506 )
...
Moved the issuer discovery details to from the CSI docs to the K8s
auth docs.
2021-09-09 08:39:21 -07:00
Jim Kalafut
d1a85a7b7e
Update 1.8 upgrade guide ( #12518 )
2021-09-08 13:14:51 -07:00
Alex Cahn
ab5ad87945
Update installation.mdx ( #12516 )
...
Updating based upon feedback from ServiceNow review
2021-09-08 12:57:15 -07:00
klucks83
6e3f60f67f
Update Auto Unseal info to say KMS instead of EKS ( #10256 )
...
While EKS may be the managed kubernetes environment under the hood, I believe the idea behind this section of the documentation is to use AWS KMS for seal/unseal operations, not EKS. (i.e. The surrounding documentation is discussing other Auto Unseal options such as Google KMS.)
The use of the term EKS instead of KMS made it hard for me to discover this section of documentation, and was a little confusing at first until I realized the possible error.
2021-09-08 10:06:24 -07:00
Justin Weissig
300112dd0a
docs: update packaging ( #12459 )
...
* [WIP] docs: update packaging
Update language to support current enterprise packaging.
* Update index.mdx
* Update entropy-augmentation.mdx
* Update entropy-augmentation.mdx
* Update control-groups.mdx
* Update sealwrap.mdx
* Update index.mdx
* Update control-groups.mdx
* Update entropy-augmentation.mdx
* Update index.mdx
* Update index.mdx
* Update sealwrap.mdx
* Update index.mdx
* Update index.mdx
* Update index.mdx
2021-09-08 08:59:25 -07:00
mickael-hc
6da5bce9a0
docs: provide clarifications for github auth method and ssh secrets engine ( #12495 )
...
* Clarify that any org GitHub user token can be used
* Clarify ssh secrets allowed_extensions behaviors
2021-09-08 10:55:35 -05:00
Rowan Smith
2f329122c5
audit page tweaks based on customer feedback ( #12504 )
2021-09-08 09:21:36 -04:00
Nicholas Seemiller
ec04bac512
Update examples.mdx ( #12333 )
...
Deployment manifest has incorrect `envs` tag. It should be `env`
2021-09-07 17:32:22 -04:00
Pratyoy Mukhopadhyay
c110745979
Update kv input documentation with edge case ( #12500 )
2021-09-07 13:15:33 -07:00
Kevin Wang
3b6725bdc8
fix(website): start script reloads app on save ( #12476 )
2021-09-03 11:36:36 -04:00
Pratyoy Mukhopadhyay
77348cacef
Remove deprecated reauth function from docs ( #12482 )
2021-09-03 06:09:21 -07:00
Yoko Hyakuna
6da086843b
Fix isues 12397 ( #12484 )
2021-09-02 17:03:55 -07:00
Zadkiel
a0fa320dcd
fix: update injector resources requirements ( #11198 )
2021-09-02 08:01:02 -07:00
Mike Green
566767a3c7
Clarify on overview page that audit is default replicated ( #12298 )
...
* Note that audit is replicated
* tweak
* clarify local is to the cluster, not only the node
* tweaking. i think this makes more sense
2021-09-01 13:53:01 -07:00