Commit Graph

18722 Commits

Author SHA1 Message Date
John-Michael Faircloth
9569b16114 secrets/db: add rotation error path test (#23182)
* secrets/db: add rotation error path test

We add a test to verify that failed rotations can successfully recover
and that they do not occur outside of a rotation window. Additionally,
we remove registering some external plugins in getCluster() that shaves
off about 5 minutes the database package tests.

* remove dead code and add test comment

* revert to original container helper after refactor
2023-09-20 14:07:17 -05:00
Aram Mirzadeh
55414e6a73 Update ldap.mdx - auth/ path missing from commands (#23184)
Change in vault mount in older versions, the new mount defaults to auth/ldap
2023-09-20 11:38:44 -07:00
Nick Cabatoff
516cbde38b Remove an extremely noisy log line (#23187)
Co-authored-by: hc-github-team-secure-vault-core <github-team-secure-vault-core@hashicorp.com>
2023-09-20 13:00:47 -04:00
Scott Miller
c08b645d8f Unseal HA changes, CE side (#23192)
* Unseal HA changes, CE side

* Transit wrapper update
2023-09-20 10:58:12 -05:00
Nick Cabatoff
cb993931b3 Fix data race, use local variable instead of global (#23188)
Co-authored-by: hc-github-team-secure-vault-core <github-team-secure-vault-core@hashicorp.com>
2023-09-20 15:18:59 +00:00
Anton Averchenkov
7d21e1b827 Fix OpenAPI OperationID for sys/decode-token (#23180) 2023-09-20 10:41:54 -04:00
Chelsea Shaw
f2be122957 UI: Show unsupported screen if replication unsupported (#23178) 2023-09-20 09:05:08 -05:00
Violet Hynes
f943c37a83 VAULT-19237 Add mount_type to secret response (#23047)
* VAULT-19237 Add mount_type to secret response

* VAULT-19237 changelog

* VAULT-19237 make MountType generic

* VAULT-19237 clean up comment

* VAULT-19237 update changelog

* VAULT-19237 update test, remove mounttype from wrapped responses

* VAULT-19237 fix a lot of tests

* VAULT-19237 standby test
2023-09-20 09:28:52 -04:00
Tom Proctor
873243df02 Allow GET for plugin runtime listing (#23171)
Also corrects the error code for reading a non-existent plugin runtime
from 500 -> 404
2023-09-20 11:59:15 +01:00
Kianna
6915edf06d UI: [VAULT-17461] add mount configuration as toggle for pki (#23166) 2023-09-19 22:58:08 +00:00
akshya96
c73eacbaf6 Fix list on password policies to list the policies containing slashes (#23155)
* fix list on password policies

* add changelog

* adding tests
2023-09-19 12:28:39 -07:00
Chelsea Shaw
cb5084b9e8 UI: cleanup unload model logic (#23154) 2023-09-19 12:47:33 -05:00
Jordan Reimer
a447f3682b Missing Auth Methods (#23165)
* fixes issue with auth methods disappearing from list view

* fixes issue with Authentication Methods sidebar nav link not staying active when mounting auth method

* fixes tests and adds coverage for missing auth methods
2023-09-19 11:35:24 -06:00
Chris van Meer
f5183b0dc9 Vault v1.150.0-rc1 dashboard UI fix (#23105)
Co-authored-by: Kianna <30884335+kiannaquach@users.noreply.github.com>
2023-09-19 10:27:30 -07:00
Chelsea Shaw
392b907989 KV V2 remove old kv v2 (#22691)
* Remove component: diff version selector

* delete SecretVersionMenu

* remove secret logic from GetCredentialsCard

* remove DiffVersionSelector hbs file and references

* delete more css for diff version view

* remove diff route

* fix credential card selector

* ui: refactor SecretFormShow (#22723)

* refactor secret form show

* fix selector typo

* remove version route (#22738)

* Remove old KV2 delete things (#23015)

* remove kv2 old delete things

* comment

* Remove old metadata (#22747)

* wip to remove metadata

* review comments

* UI/remove kv2 secret create or update (#23039)

* remove is v2 param

* permissions clean up

* remove version things

* remove excess from form show

* clean up

* created time was never a thing for cubbyhole, confirmed on api

* update tune test

* fix control group tests:

* Remove kv v2 models (#23087)

* remove is v2 param

* permissions clean up

* remove version things

* remove excess from form show

* clean up

* created time was never a thing for cubbyhole, confirmed on api

* update tune test

* fix control group tests:

* remove models

* Update ui/app/models/secret-engine.js

Co-authored-by: Chelsea Shaw <82459713+hashishaw@users.noreply.github.com>

* blah prettier

---------

Co-authored-by: Chelsea Shaw <82459713+hashishaw@users.noreply.github.com>

* UI/config update (#23111)

* sweep through clean up

* remove component

* remove unused selectors

* remove unncessary

---------

Co-authored-by: claire bontempo <68122737+hellobontempo@users.noreply.github.com>
Co-authored-by: clairebontempo@gmail.com <clairebontempo@gmail.com>
Co-authored-by: Angel Garbarino <Monkeychip@users.noreply.github.com>
Co-authored-by: Angel Garbarino <angel@hashicorp.com>
2023-09-19 09:49:04 -06:00
Hamid Ghaf
d5f4243c9e fix: Fail in goroutine after tests have completed (#23158)
* fix panic: Fail in goroutine after TestProxy_Config_ReloadTls has completed

* fix proxy test

* feedback

* track the command output code and stdout/err
2023-09-19 08:40:10 -07:00
John-Michael Faircloth
1e76ad42ef secrets/db: add tests for static role config updates (#23153) 2023-09-19 10:12:09 -05:00
Chelsea Shaw
e48a57c5ce UI: Use TTL editType for format=duration from OpenAPI (#23124) 2023-09-18 21:28:15 +00:00
Ryan Cragun
5449a99aba test: wait for nc to be listening before enabling auditor (#23142)
Rather than assuming a short sleep will work, we instead wait until netcat is listening of the socket. We've also configured the netcat listener to persist after the first connection, which allows Vault and us to check the connection without the process closing.

As we implemented this we also ran into AWS issues in us-east-1 and us-west-2, so we've changed our deploy regions until those issues are resolved.

Signed-off-by: Ryan Cragun <me@ryan.ec>
2023-09-18 14:47:13 -06:00
Nicola Kabar
2a46d492a3 updated the LIST identity/entity-alias/id endpoint docs (#23016)
* updated the LIST identity/entity-alias/id endpoint docs to reflect new data returned

* Update website/content/api-docs/secret/identity/entity-alias.mdx

Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>

* Update website/content/api-docs/secret/identity/entity-alias.mdx

Co-authored-by: Max Bowsher <maxbowsher@gmail.com>

---------

Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>
Co-authored-by: Max Bowsher <maxbowsher@gmail.com>
2023-09-18 12:30:30 -07:00
Rachel Culpepper
a25d2426c9 Fix seal health check log message (#23141)
* fix seal health check log message

* add back missing import
2023-09-18 12:50:30 -05:00
Marc Boudreau
00bbc0bd65 adjust nc command to ensure ssh session is not blocked (#23139) 2023-09-18 10:14:26 -06:00
Raymond Ho
6e5bd7abd9 disable ldap tests for arm (#23118) 2023-09-18 10:48:03 -05:00
Ryan Cragun
464aeebddc test: fix netcat install and listen for socket audit device (#23134)
Fix an issue where netcat would not be installed correctly with certain
package managers. We also fix an issue where SSH cannot exit because nc
is waitaing for SIGHUP, resulting in scenarios running forever.

Signed-off-by: Ryan Cragun <me@ryan.ec>
2023-09-15 18:33:47 -06:00
malinac02
79b2f09715 UI: HDS adoption replace <CopyButton> component (#22333)
* Part 1: Upgrade HDS to 2.9.0 (#22311)

* UI: HDS adoption replace <CopyButton> part 2 (#22356)

* certificate-card.hbs: replace 1 <CopyButton> with <Hds::Copy::Button>

* scope-form.hbs: replace 1 <CopyButton> with <Hds::Copy::Button>

* fix tests caused by changing certificate-card. change hds copy button in certificate-card.hbs

* json-editor.hbs: replace 1 <CopyButton> with <Hds::Copy::Button>

* masked-input.hbs: replace 1 <CopyButton> with <Hds::Copy::Button>

* fix error with certificate-card.hbs copy button

* fix tests that deal with certificate-card.hbs

* add class to hds copy buttons to maintain similar styling to curent UI

* info-table-row.hbs: replace 2 <CopyButton> with <Hds::Copy::Button>

* undo change that should instead by merged in from main

* change tooltip copy button to white. cleanup

* add extra tet for oidc scope form. edit css class for the white icon copy button

* fix tests

* UI: HDS adoption replace <CopyButton> part 3 (#22614)

* encrypt.hbs: replace 2 <CopyButton> with <Hds::Copy::Button>

* decrypt.hbs: replace 2 <CopyButton> with <Hds::Copy::Button>

* datakey.hbs. replace 6 <CopyButton> with <Hds::Copy::Button>

* rewrap.hbs: replace 2 <CopyButton> with <Hds::Copy::Button>

* hmac.hbs: replace 2 <CopyButton> with <Hds::Copy::Button>

* fix typo

* add copy-close class to copy & close buttons

* export.hbs: replace 2 <CopyButton> with <Hds::Copy::Button>. fix styling

* sign.hbs: replace 2 <CopyButton> with <Hds::Copy::Button>

* fix test caused by changing <pre> tag to <code> in export.hbs

* rename class

* add extra style to class needed for part 4 of copy button replacement

* UI: HDS adoption replace <CopyButton> part 4 (#22749)

* user-menu.hbs: replace 1 <CopyButton> with <Hds::Copy::Button>

* transit-form-show.hbs: replace 1 <CopyButton> with <Hds::Copy::Button>

* configure-ssh-secret.hbs: replace 1 <CopyButton> with <Hds::Copy::Button>

* tool-hash.hbs: replace 1 <CopyButton> with <Hds::Copy::Button>

* tool-random.hbs: replace 1 <CopyButton> with <Hds::Copy::Button>

* tool-rewrap.hbs: replace 1 <CopyButton> with <Hds::Copy::Button>

* tool-unwrap.hbs: replace 1 <CopyButton> with <Hds::Copy::Button>

* tool-wrap.hbs: replace 1 <CopyButton> with <Hds::Copy::Button>

* paths.hbs: replace 1 <CopyButton> with <Hds::Copy::Button>

* code-snippet.hbs: replace 1 <CopyButton> with <Hds::Copy::Button>

* cleanup css for code-snippet. add comments for getting rid of code-snippet and replacing with <Hds::Copy::Snippet

* change code-snippet copy icon to gray to match original design

* change code-snippet class

* accounts.hbs: replace 1 <CopyButton> with <Hds::Copy::Button>

* hover-copy-button.hbs: replace 1 <CopyButton> with <Hds::Copy::Button>

* add.hbs: replace 1 <CopyButton> with <Hds::Copy::Button>

* show.hbs: replace 1 <CopyButton> with <Hds::Copy::Button>

* copy-secret-dropdown.hbs: replace 1 <CopyButton> with <Hds::Copy::Button>

* change styling of 'link' copy buttons

* generate-credentials.hbs: replace 2 <CopyButton> with <Hds::Copy::Button>

* transform-show-transformation.hbs: replace 2 <CopyButton> with <Hds::Copy::Button>

* sign.hbs: replace 2 <CopyButton> with <Hds::Copy::Button>

* hide some copy buttons' icons and use original flash message

* undo cleanup of scss file so that I can put cleanup all into one PR to be more organized

* update code snippet copy button

* UI: HDS adoption replace <CopyButton> part 5: Cleanup (#22884)

* remove unecessary code-snippet.scssn class

* remove copy classes from masked-input.scss

* remove copy button class from text-file.scss

* uninstall ember-cli-clipboard 0.16.0 since there is no longer structure <CopyButton>

* remove copyright message from code-snippet.scss to avoid merge conflicts with main, where the file is deleted

* replace 2 classes with one

* remove unecessary class from copy button

* cleanup classes

* revert changes to avoid merge conflicts

* remove is-block class

* conditionally render private key

* add more info to comment

* remove HoverCopyButton

* add missing selector

* fix control group padding

---------

Co-authored-by: clairebontempo@gmail.com <clairebontempo@gmail.com>
Co-authored-by: claire bontempo <68122737+hellobontempo@users.noreply.github.com>

* rename class to transparent background

* remove unused test selectors

* replace transit actions with Copy::Snippet

* replace transfrom code blocks with code snippet component

* revert extra css fiddling

* misc cleanup, unused action

* remove copy & close buttons from transit modals

* remove is- from class naming

* remove hds-copy-button class

* add other grey class

* more small cleanup

* add -top to margin

* add changelog

---------

Co-authored-by: clairebontempo@gmail.com <clairebontempo@gmail.com>
Co-authored-by: claire bontempo <68122737+hellobontempo@users.noreply.github.com>
2023-09-15 23:46:10 +00:00
Kianna
d939a20310 UI: [VAULT-18178] Fix filter/search bug in search secrets engines (#23123) 2023-09-15 22:03:17 +00:00
Jordan Reimer
824065b3ab fixes styling issue in json editor toolbar (#23120) 2023-09-15 21:40:18 +00:00
Chelsea Shaw
3f9b6075aa UI: add SSH role attribute allowed_domains_template (#23119) 2023-09-15 21:35:02 +00:00
Chelsea Shaw
e17a14d6b0 UI: Correctly handle error from errorResponseWithStatusCode helper (#23102) 2023-09-15 18:18:49 +00:00
Pavlos Karakalidis
bc69ef899a docs(agent): clarify usage of exit_after_auth flag (#22954)
Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>
2023-09-15 10:02:18 -07:00
soly-hashicorp
4b9b5d60e6 Update raft.mdx (#23001)
* Update raft.mdx
---------

Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>
2023-09-15 09:55:35 -07:00
Jordan Reimer
111d472839 updates ember template lint config to override prettier in tests and removes ignore (#23108) 2023-09-15 10:41:05 -06:00
Marc Boudreau
e30c50321c enable all audit devices in Enos's vault_cluster module (#22408) 2023-09-15 10:44:23 -04:00
Raymond Ho
25221fe012 downgrade go-ldap client to v3.4.4 due to race conditions in tests (#23103) 2023-09-14 23:18:20 +00:00
Kianna
71808c00ec UI: [VAULT-19982] confirm delete modal for namespaces (#23066) 2023-09-14 12:19:35 -07:00
Jordan Reimer
b03300689a updates file-to-array-buffer component to glimmer and fixes flaky issue in test runs (#23081) 2023-09-14 12:41:09 -06:00
Tony Wittinger
51b38cecf4 Update CHANGELOG.md (#23069)
* Update CHANGELOG.md

* Update CHANGELOG.md

* Update CHANGELOG.md

Co-authored-by: Calvin Leung Huang <1883212+calvn@users.noreply.github.com>

* Update CHANGELOG.md

Co-authored-by: Calvin Leung Huang <1883212+calvn@users.noreply.github.com>

* Update CHANGELOG.md

Co-authored-by: Calvin Leung Huang <1883212+calvn@users.noreply.github.com>

* Update CHANGELOG.md

Co-authored-by: Calvin Leung Huang <1883212+calvn@users.noreply.github.com>

* Update CHANGELOG.md

Co-authored-by: Calvin Leung Huang <1883212+calvn@users.noreply.github.com>

* Update CHANGELOG.md

Co-authored-by: Calvin Leung Huang <1883212+calvn@users.noreply.github.com>

* Update CHANGELOG.md

Removed docs changes that shouldn't be included

* Update CHANGELOG.md

updated with suggestions

* Update CHANGELOG.md

Co-authored-by: Calvin Leung Huang <1883212+calvn@users.noreply.github.com>

---------

Co-authored-by: Calvin Leung Huang <1883212+calvn@users.noreply.github.com>
2023-09-14 11:30:53 -07:00
Kianna
e5d2b2b842 UI: [VAULT-19340] update test selectors for dashboard (#23053) 2023-09-14 11:29:25 -07:00
Steven Clark
92afdb58e0 Add known issues around transit managed keys (#23080)
* Add known issues around transit managed keys

 - Document known issue around managed key encryption failure with Cloud KMS backed keys and the failure to sign with managed keys

* Fix filename typos

* Update website/content/partials/known-issues/transit-managed-keys-sign-fails.mdx

Co-authored-by: Alexander Scheel <alex.scheel@hashicorp.com>

* Update website/content/partials/known-issues/transit-managed-keys-panics.mdx

Co-authored-by: Alexander Scheel <alex.scheel@hashicorp.com>

* Apply PR feedback

* Missed new line to force error on new-line.

---------

Co-authored-by: Alexander Scheel <alex.scheel@hashicorp.com>
2023-09-14 14:27:02 -04:00
Kuba Wieczorek
37215ae311 [VAULT-14497] Ensure Role Governing Policies are only applied down the namespace hierarchy (#23090) 2023-09-14 19:24:45 +01:00
Tom Proctor
e29c6c129d Bump plugincontainer dep v0.2.0 -> v0.2.1 (#23075)
Fixes a bug that prevented Vault from streaming plugin containers' logs
2023-09-14 18:33:14 +01:00
Raymond Ho
018e5675fe VAULT 18227/introduce cap ldap library (#22185) 2023-09-14 10:26:29 -07:00
Meggie
854ea77f9e Added "enabled by default" language to 1.13 release notes. (#23076) 2023-09-14 13:01:29 -04:00
Jonathan Frappier
f0fb07b0b2 Add section about user lockout (#23068) 2023-09-13 18:37:38 -04:00
Christopher Swenson
b9099ee0ea auth/centrify: Centrify auth method is now deprecated (#23050)
Slated for removal in 1.17
2023-09-13 21:45:06 +00:00
hc-github-team-secure-vault-core
3116e2ecab Update hashicorp/vault-plugin-auth-azure to v0.16.2 (#23060)
* Automated dependency upgrades

* Add changelog

---------

Co-authored-by: hc-github-team-secure-vault-ecosystem <hc-github-team-secure-vault-ecosystem@users.noreply.github.com>
2023-09-13 21:30:00 +00:00
Christopher Swenson
82e9b610df events: Don't accept websocket connection until subscription is active (#23024)
The WebSocket tests have been very flaky because we weren't able to tell when a WebSocket was fully connected and subscribed to events.

We reworked the websocket subscription code to accept the websocket only after subscribing.

This should eliminate all flakiness in these tests. 🤞 (We can follow-up in an enterprise PR to simplify some of the tests after this fix is merged.)

I ran this locally a bunch of times and with data race detection enabled, and did not see any failures.

Co-authored-by: Tom Proctor <tomhjp@users.noreply.github.com>
2023-09-13 14:28:17 -07:00
Tom Proctor
8e7c6e80d5 events: Ensure pipelines are cleaned up on closing subscription (#23042)
* events: Ensure pipelines are cleaned up on closing subscription
* Re-register formatter node on each subscribe
2023-09-13 22:23:24 +01:00
Jason O'Donnell
27d647f97a Update changelog for auth/azure v0.16.2 (#23059)
* update changelog for azure v0.16.2

* Add retry docs
2023-09-13 21:23:01 +00:00
Christopher Swenson
500cf21d0d events: Update docs for beta release (#23036)
Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>
2023-09-13 14:18:18 -07:00