Commit Graph

18722 Commits

Author SHA1 Message Date
claire bontempo
efca08d295 UI: fix redirect after creating new version of a KV v2 secret in a namespace (#22630)
* add version to query params when transitioning after creating a new version

* add test coverage

* update urls in tests

* add logout method

* use desctructured secret

* remove path

* add clearRecords

* fix assertion

* clear ns just in case

* clear ns just in case
2023-08-30 14:11:19 -07:00
hc-github-team-secure-vault-core
9006375b53 Update hashicorp/vault-plugin-auth-alicloud to v0.16.0 (#22646)
* Automated dependency upgrades

* Add changelog

---------

Co-authored-by: hc-github-team-secure-vault-ecosystem <hc-github-team-secure-vault-ecosystem@users.noreply.github.com>
2023-08-30 20:51:10 +00:00
John-Michael Faircloth
8bae1c18da gha: fix plugin update check labeling (#22647) 2023-08-30 13:22:31 -07:00
hc-github-team-secure-vault-core
7a5911be4f Update hashicorp/vault-plugin-database-redis to v0.2.2 (#22654)
* Automated dependency upgrades

* Add changelog

---------

Co-authored-by: hc-github-team-secure-vault-ecosystem <hc-github-team-secure-vault-ecosystem@users.noreply.github.com>
2023-08-30 20:09:00 +00:00
Victor Rodriguez
a96a1a7346 When not in seal HA, do not use Rewrapped flag to trigger a seal re-wrap on start up. (#22668) 2023-08-30 16:02:32 -04:00
hc-github-team-secure-vault-core
c8efa4c7a4 Update hashicorp/vault-plugin-database-mongodbatlas to v0.10.1 (#22655)
* Automated dependency upgrades

* Add changelog

---------

Co-authored-by: hc-github-team-secure-vault-ecosystem <hc-github-team-secure-vault-ecosystem@users.noreply.github.com>
2023-08-30 11:58:32 -07:00
Sarah Chavis
71f76a9ae4 add known issue partial and update related docs (#22629) 2023-08-30 14:53:00 -04:00
Pratik Khasnabis
658e0f4151 Softveda patch what is vault (#12686)
* Expanded the description for "What is Vault?". This descripton is what is used by HashiCorp CSA team.
2023-08-30 18:27:23 +00:00
Sarah Chavis
bd3596610f Add the appropriate enterprise alerts for seal wrapping (#22628) 2023-08-30 11:09:49 -07:00
Sean Ellefson
2b626eae18 Correcting method from GET to LIST (#22649) 2023-08-30 11:03:23 -07:00
Nick Cabatoff
2d2c9c2f0c Sync CE with Ent: improve slack notifications for test failures (#22656) 2023-08-30 13:57:31 -04:00
Luciano Di Lalla
d8be27acef Update CHANGELOG.md (#22644)
CL update for 1.14.2, 1.13.6 and 1.12.10
2023-08-30 13:42:48 -04:00
Violet Hynes
2826be941f Fix broken quotas metrics links (#22650) 2023-08-30 13:24:42 -04:00
Zach Shilton
e35e0d0183 chore(website): remove security mdx file (#22652) 2023-08-30 10:17:19 -07:00
ram-parameswaran
92734f109d Update azure.mdx with Azure debug info (#22273)
* Add a section for enabling Azure debug logs for Azure secret engine similar to the section in the Azure Auth method.

---------

Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>
2023-08-30 09:41:09 -07:00
Bianca Moreira
cf43d3eeed Add administrative namespace docs (#22581)
* Add administrative namespace section to namespaces docs
* Tag sys endpoints with restricted admin alert
---------

Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>
2023-08-30 09:31:53 -07:00
Chelsea Shaw
b18313b4eb UI: kv-v2 version history & path tests (#22593) 2023-08-30 15:23:15 +00:00
Mike Palmiotto
c4a8b23d93 Only resolve roles for role quotas and leases (#22597) 2023-08-30 10:13:30 -04:00
Sarah Chavis
ce2851543f [DOCS] Tweak language, add warning for root creds (#22627)
* Tweak language, add warning for root creds
---------

Co-authored-by: Calvin Leung Huang <1883212+calvn@users.noreply.github.com>
2023-08-30 00:44:45 +00:00
claire bontempo
408d4f7aeb ui: addressing flaky transit backend and userpass tests (#22617)
* break key types into smaller groups

* use console command helpers

* split up into one more group

* remove ux of disabling submit button

* update userpass test
2023-08-29 16:29:55 -06:00
Austin Gebauer
d24adad7dd Lifts login handlers map to a variable (#22624) 2023-08-29 15:28:35 -07:00
Mike Palmiotto
7cd0dd97d2 Only track role in login path (#22620) 2023-08-29 13:49:27 -07:00
Victor Rodriguez
7ed7bddde3 Fix JSON serialization of SealGenerationInfo. (#22611) 2023-08-29 13:56:19 -04:00
hc-github-team-secure-vault-core
5ac26d3da0 Update hashicorp/vault-plugin-auth-gcp to v0.16.1 (#22612)
* Automated dependency upgrades

* Add changelog

---------

Co-authored-by: hc-github-team-secure-vault-ecosystem <hc-github-team-secure-vault-ecosystem@users.noreply.github.com>
2023-08-29 17:55:57 +00:00
Christopher Swenson
917a5863fe Allow more time for CI events test (#22589)
CI is sometimes slow, so 100ms was not enough time for all events
to be sent and processed in `http/events_test.go`.

We bumped that timeout to a full 1 second, but also added a trick at
the end to shorten the timeout once the expected number of events
have been receieved. This way, once the test has passed, we only
wait 100ms for any "extra" events to make the test fail, instead
of waiting for the full 1 second before we let the test pass. This
should keep the test relatively fast, while still allowing for it to
be slow sometimes.
2023-08-29 09:32:18 -07:00
Austin Gebauer
64dd7a939f Set proper namespace in context given to backend InitializeFunc (#22587)
* Set proper namespace in context given to backend InitializeFunc

* add proper namespace in context for credential backends too
2023-08-29 09:11:41 -07:00
Nestor Reyes
9fc303bad1 Update oracle-tde.mdx Formatting issues (#22522)
* Update oracle-tde.mdx

* Update website/content/docs/enterprise/pkcs11-provider/oracle-tde.mdx
---------
2023-08-29 09:04:15 -07:00
Adam Rowan
d0997baebc Update interoperability-matrix.mdx (#22569)
Adding in two new KMS integrations that were missing before.

Co-authored-by: Alex Cahn <acahn@hashicorp.com>
2023-08-29 08:41:38 -07:00
Ellie
9b78fd64ac Remove unnecessary call to DetermineRoleFromLoginRequest (#22603)
* remove unnecessary call to DetermineRoleFromLoginRequest

* add more context to comment
2023-08-29 09:56:34 -05:00
Sean Ellefson
9cd0d919f5 Add note to outline correspondence with Consul config (#22545)
* Add note to outline correspondence with Consul config

Calling out corresponding parameter for Vault's integrated storage `max_entry_size` with Consul's `kv_max_value_size`.

* Update website/content/docs/configuration/storage/raft.mdx

---------

Co-authored-by: Violet Hynes <violet.hynes@hashicorp.com>
2023-08-29 10:20:01 -04:00
hc-github-team-secure-vault-core
3126b9f365 Update hashicorp/vault-plugin-database-redis-elasticache to v0.2.3 (#22598)
* Automated dependency upgrades

* Add changelog

---------

Co-authored-by: hc-github-team-secure-vault-ecosystem <hc-github-team-secure-vault-ecosystem@users.noreply.github.com>
2023-08-29 00:04:12 +00:00
Ellie
cccfdb088f reduce calls to DetermineRoleFromLoginRequest from 3 to 1 for aws auth method (#22583)
* reduce calls to DetermineRoleFromLoginRequest from 3 to 1 for aws auth method

* change ordering of LoginCreateToken args

* replace another determineRoleFromLoginRequest function with role from context

* add changelog

* Check for role in context if not there make call to DeteremineRoleFromLoginRequest

* move context role check below nanmespace check

* Update changelog/22583.txt

Co-authored-by: Nick Cabatoff <ncabatoff@hashicorp.com>

* revert signature to same order

* make sure resp is last argument

* retrieve role from context closer to where role variable is needed

* remove failsafe for role in mfa login

* Update changelog/22583.txt

---------

Co-authored-by: Nick Cabatoff <ncabatoff@hashicorp.com>
2023-08-28 16:01:07 -05:00
John-Michael Faircloth
aa05ba6105 adv ttl mgmt: define schedule interface (#22590) 2023-08-28 13:14:38 -07:00
Austin Gebauer
e941d444a9 Adds stubbed InitializeFunc to the system backend (#22588) 2023-08-28 13:00:21 -07:00
Thomas Schweizer-Bolzonello
958eb96bab Fix typo OSCP -> OCSP (#22586) 2023-08-28 18:39:01 +00:00
Theron Voran
66db439027 ci/plugin-update: use rest of repo name as service (#22585)
Includes everything after the 3rd position as the PLUGIN_SERVICE, so
that plugins like "vault-plugin-database-redis-elasticache" end up
with the full name in the changelog entry.
2023-08-28 11:28:25 -07:00
hc-github-team-secure-vault-core
2fc490b408 Update hashicorp/vault-plugin-database-redis-elasticache to v0.2.2 (#22584)
* Automated dependency upgrades

* Add changelog

---------

Co-authored-by: hc-github-team-secure-vault-ecosystem <hc-github-team-secure-vault-ecosystem@users.noreply.github.com>
2023-08-28 18:05:10 +00:00
Divya Pola
e600d43690 Add safety logic for rejecting seal configuration changes (#22582)
* Fix clone method and add new validation for same gen

* Add safety logic for rejecting seal configuration changes

* Remove ent build req for test file
2023-08-28 11:58:16 -05:00
Austin Gebauer
36174bc913 Fixes events subscribe for non-root namespaces (#22580)
* Fixes events subscribe for non-root namespaces

* Adds a test
2023-08-28 09:17:33 -07:00
Nick Cabatoff
4264c5a262 Oss changes for activity log tests (#22231) 2023-08-28 10:19:13 -04:00
Max Bowsher
479519e6df Fix erroneous OpenAPI operation IDs (#22579)
The recent additions to the transit secret engine have created two new
endpoints which both have the incorrect (and duplicate) operation ID of
just `"update"`.

Amend to unique meaningful values.
2023-08-28 09:11:16 -04:00
Chelsea Shaw
9b149c546f UI: kv-v2 delete workflow tests (#22565) 2023-08-25 23:28:30 +00:00
claire bontempo
f3b9323501 ui: Wire up new KV ember engine to main app (#22559) 2023-08-25 17:45:23 -05:00
Angel Garbarino
8d6675200d Fix auth-list flaky test (#22568)
* fix

* clean up comments

* remove extra space

* fix flaky timezone test:

* worth a try
2023-08-25 15:47:42 -06:00
Kianna
463ccb166e UI: Skip some community tests for now (#22570) 2023-08-25 14:33:53 -07:00
Mike Palmiotto
135240d637 Fix potential race on core.activityLog (#22571) 2023-08-25 21:24:35 +00:00
Christopher Swenson
3e900fdda1 events: Add support for multi-namespace subscriptions (#22540)
Events from multiple namespaces can be subscribed to via
glob patterns passed to the subscription.

This does not do policy enforcement yet -- that will come in PR soon.

I tested this manually as well by pulling it into Vault Enterprise
so I could create namespaces and check that subscriptions work as
expected.

Co-authored-by: Tom Proctor <tomhjp@users.noreply.github.com>
2023-08-25 21:04:45 +00:00
Chelsea Shaw
f143f6a070 UI: Allow create or update KV with control group on KV Engine (#22552) 2023-08-25 20:19:44 +00:00
claire bontempo
9e00094801 ui: fix missing KMIP and Transform apiPath param (#22566)
* add missing api param to scopes

* and add backend param to transform
2023-08-25 16:57:12 +00:00
Jordan Reimer
a8b593614e LDAP/AD Secrets Engine (#20790)
* adds ldap ember engine (#20786)

* adds ldap as mountable and supported secrets engine (#20793)

* removes active directory as mountable secrets engine (#20798)

* LDAP Config Ember Data Setup (#20863)

* adds secret-engine-path adapter

* adds model, adapater and serializer for ldap config

* adds test for ldap config adapter

* addresses PR feedback

* updates remaining instances of getURL in secrets-engine-path adapter

* adds underscore to getURL method in kubernetes/config adapter

* adds check config vars test for kubernetes/config adapter

* adds comment regarding primaryKey in secrets-engine-path adapter

* adds tab-page-header component for ldap secrets engine (#20941)

* LDAP Config Route (#21059)

* converts secret-mount-path service to ts and moves kubernetes fetch-config decorator to core addon and converts to ts

* adds ldap config route

* fixes withConfig import path in kubernetes roles route

* updates types in ldap config route

* adds unit tests for fetch-secret-config decorator

* updates comments in fetch-secret-config decorator

* renames fetch-secret-config decorator

* LDAP Configure Page Component (#21384)

* adds ldap page configure component

* removes pauseTest and updates radio card selector in ldap config test

* LDAP Configuration (#21430)

* adds ldap configuration route

* adds secrets-engine-mount-config component to core addon

* adds ldap config-cta component

* adds display fields to ldap configuration page and test

* fixes ldap config-cta test

* adds yield to secrets-engine-mount-config component

* fixes tests

* LDAP Overview Route and Page Component (#21579)

* adds ldap overview route and page component

* changes toolbar link action type for create role on overview page

* LDAP Role Model, Adapter and Serializer (#21655)

* adds model, adapter and serializer for ldap roles

* addresses review feedback

* changes ldap role type from tracked prop to attr and sets in adapter for query methods

* adds assertions to verify that frontend only props are returned from query methods in ldap role adapter

* LDAP Library Model, Adapter and Serializer (#21728)

* adds model, adapter and serializer for ldap library

* updates capitalization and punction for ldap role and library form fields

* LDAP Roles Create and Edit (#21818)

* moves stringify and jsonify helpers to core addon

* adds validation error for ttl picker in form field component

* adds ldap roles create and edit routes and page component

* adds ldap mirage handler and factory for roles

* adds example workflow to json editor component

* adds tests for ldap page create and edit component

* addresses feedback

* LDAP Role Details (#22036)

* adds ldap role route to pass down model to child routes

* adds ldap role details route and page component

* updates ldap role model capabilities checks

* adds periods to error messages

* removes modelFor from ldap roles edit and details routes

* adds flash message on ldap role delete success

* LDAP Roles (#22070)

* adds ldap roles route and page component

* update ldap role adapter tests and adds adapter options to query for partialErrorInfo

* updates ldap role adapter based on PR feedback

* adds filter-input component to core addon

* updates ldap roles page to use filter-input component

* updates ldap role adapter tests

* LDAP Role Credentials (#22142)

* adds ldap roles route and page component

* update ldap role adapter tests and adds adapter options to query for partialErrorInfo

* adds credentials actions to ldap roles list menu and fixes rotate action in details view

* adds ldap role credentials route and page component

* adds tests for ldap role credentials

* LDAP Library Create and Edit (#22171)

* adds ldap library create/edit routes and page component

* adds ldap library create-and-edit tests and library mirage factory

* updates form-field component to display validation errors and warnings for all fields

* updates ldap library edit route class name

* updates ldap library model interface name

* adds missing period in flash message

* LDAP Libraries (#22184)

* updates interface and class names in ldap roles route

* adds ldap libraries route and page component

* fixes lint error

* LDAP Library Details (#22200)

* updates interface and class names in ldap roles route

* adds ldap libraries route and page component

* fixes lint error

* adds ldap library details route and page component

* LDAP Library Details Configuration (#22201)

* updates interface and class names in ldap roles route

* adds ldap libraries route and page component

* fixes lint error

* adds ldap library details route and page component

* adds ldap library details configuration route and page component

* updates ldap library check-in enforcement value mapping

* fixes issue in code mirror modifier after merging upgrade

* fixes failing database secrets test

* LDAP Library Account Details (#22287)

* adds route and page component for ldap library accounts

* adds ldap component for checked out accounts

* updates ldap library adapter tests

* LDAP Library Check-out (#22289)

* adds route and page component for ldap library accounts

* adds ldap component for checked out accounts

* adds route and page component for ldap library checkout

* addresses PR feedback

* LDAP Overview Cards (#22325)

* adds overview cards to ldap overview route

* adds create library toolbar action to ldap overview route

* adds acceptance tests for ldap workflows (#22375)

* Fetch Secrets Engine Config Decorator Docs (#22416)

* removes uneccesary asyncs from ldap route model hooks

* updates ldap overview route class name

* adds documentation for fetch-secrets-engine-config decorator

* add changelog

* adding back external links, missed due to merge.

* changelog

* fix test after merging in dashboard work

* Update 20790.txt

---------

Co-authored-by: Angel Garbarino <angel@hashicorp.com>
Co-authored-by: Angel Garbarino <Monkeychip@users.noreply.github.com>
2023-08-25 10:54:29 -06:00