Commit Graph

18722 Commits

Author SHA1 Message Date
Peter Wilson
e5432b0577 VAULT-19863: Per-listener redaction settings (#23534)
* add redaction config settings to listener

* sys seal redaction + test modification for default handler properties

* build date should be redacted by 'redact_version' too

* sys-health redaction + test fiddling

* sys-leader redaction

* added changelog

* Lots of places need ListenerConfig

* Renamed options to something more specific for now

* tests for listener config options

* changelog updated

* updates based on PR comments

* updates based on PR comments - removed unrequired test case field

* fixes for docker tests and potentially server dev mode related flags
2023-10-06 17:39:02 +01:00
Scott Miller
ebef296c30 Be a bit more explicit about the need for two seals. (#23553)
* Be a bit more explicit about th need for two seals

* Add a mixture note
2023-10-06 11:29:17 -05:00
Nick Cabatoff
5bf40c6e2d Remove old hooks and start calling new ones. (#23550) 2023-10-06 12:16:19 -04:00
Robert
baa4dbe8e2 Add known issue notice for AWS auth panic (#23552)
* Add known issue
2023-10-06 11:03:31 -05:00
Nick Cabatoff
7e249707c1 Start process of replacing init-style ent hooks with stubmaker. (#23545) 2023-10-06 09:52:50 -04:00
Christopher Swenson
60f6c40202 events: Ignore send context (#23500)
When sending an event asynchronously, the original context used for
whatever generated the event (probably a synchronous, quick HTTP
context) is probably not what is wanted for sending the event, which
could face delays if a consumer is backed up.

I will admit myself to sometimes having "context blindness", where
I just take whatever context is incoming in a function and thread it
out to all calls. Normally this is the right thing to do when, say,
tying downstream API calls to an upstream HTTP timeout.

When making KV events, for example, we used the HTTP context for
`SendEvent()`, and this can cause the events to be dropped if they
aren't taken from the channel before the HTTP request finishes.

In retrospect, it was probably unnecessary to include a context in
the `SendEvent` interface.

We keep the context in place for backwards compability, but also in
case we want to use it for purposes other than timeouts and
cancellations in the future.
2023-10-05 13:50:16 -07:00
Sarah Chavis
41174bde89 Fix typo in table (#23533) 2023-10-05 12:57:14 -07:00
Max Coulombe
acf0736590 Slight rephrase for the association API endpoints (#23393)
* slight rephrase for the association API endpoints
---------

Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>
2023-10-05 14:53:21 -04:00
Ben Ash
f929dcf7c8 Document how to upgrade a Helm managed VSO (#23512)
Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>
Co-authored-by: Theron Voran <tvoran@users.noreply.github.com>
2023-10-05 13:59:22 -04:00
Peter Wilson
b4d221536a bump go-eventlogger to v0.2.5 (#23526) 2023-10-05 17:23:21 +00:00
Sarah Chavis
8ee4b1e1d0 [DOCS] Confirm restricted endpoint alerts (main) (#23514)
* Make sure includes are fully correct
* Remove duplicates and sort A-Z
2023-10-05 13:00:40 -04:00
Jordan Reimer
cbb96b230c Policies Error Route (#23516)
* adds error route for policies

* adds changelog entry
2023-10-05 09:29:20 -06:00
Peter Wilson
0309c9e032 Config: Listener parsing clean-up (#23502)
* Updated test for go-sockaddr template

* Rename test

* Tried to break up listener config parsing and add tests
2023-10-05 16:12:31 +01:00
Ryan Cragun
7d800b1af2 [QT-623] Pin to terraform 1.5.x (#23508)
Terraform 1.6.x seems to have some incompatiblity with the current
version fo enos and its usage of tfjson. Pin to 1.5.x until it has been
resolved.

```
│ Error: json: cannot unmarshal array into Go struct field rawState.checks of type tfjson.CheckResultStatic
│
```

Signed-off-by: Ryan Cragun <me@ryan.ec>
2023-10-04 14:01:39 -06:00
Chelsea Shaw
be05b3b961 UI: sanitize managed namespace input (#23449) 2023-10-04 13:42:04 -05:00
Jason O'Donnell
5123ea933a core/link: fix bug where lock was unlocked before getting ha state (#23389) 2023-10-04 17:38:41 +00:00
xka5h
b5ff3f8113 add HCP Vault tab for venafi + minor format update (#23467) 2023-10-04 11:07:48 -04:00
Nick Cabatoff
9c28951e4e Set VAULT_TEST_LOG_DIR, so that users of NewTestLogger will have their logs written there instead of stdout. (#23494) 2023-10-04 10:35:21 -04:00
Conor McCullough
9019203e9f MongoDB database secret engine - rotate-root - Only default to admin if DB blank (#23240)
* Only default to admin if DB blank

* Added some basic tests
2023-10-03 20:28:25 -05:00
Angel Garbarino
1fdf56d2b1 Fix Copy token button when sidebar navigation is in a collapsed state due to a small window size (#23331)
* one line fix

* changelog
2023-10-03 18:02:14 -06:00
Robert
999111e5b3 Revert "auth/aws: fix panic in IAM-based login when client config doesn't exist (#23366)" (#23480)
This reverts commit 80e1912adb.
2023-10-03 16:01:40 -05:00
Ryan Cragun
9afd5e52ae [QT-602] Don't fail if scenarios cannot completely destroy infra (#23473)
Sometimes destroying resources in AWS will fail because of unexpected
dependency violations or other such nonsense. When this happens the
behavior of Vault that we wanted to verify has already been successfully
accomplished, however the required workflow will fail. This change
allows us to succeed if `enos scenario launch` completes but allows
`enos scenario destroy` to fail. We still notify our slack channel on
destroy failures so that we can investigate issues, however it won't
require a PR author to retry.

* Execute `enos scenario launch` instead of `enos scenario run` to allow
  for very occasional issues when tearing down test infrastructure.
* Improve an error message when getting secondary cluster IP addresses.
* Don't race to get secondary cluster IP addresses.
* Add secondary token to replication scenario outputs.

Signed-off-by: Ryan Cragun <me@ryan.ec>
2023-10-03 13:04:55 -06:00
Angel Garbarino
9774cb0d05 Allow AWS secret engine to send empty policy document (#23470)
* fix

* changelog
2023-10-03 10:59:52 -07:00
Ben Ash
d7778aeb78 docs: link to the VSO+HVS quick-start tutorial (#23461) 2023-10-03 12:42:45 -04:00
Kianna
ed76e17766 UI: [VAULT-19693] Only make vault configuration call when in root namespace (#23394) 2023-10-03 16:12:50 +00:00
Kianna
c2952e3f44 UI: [VAULT-20626] Hide replication if user doesnt have permissions (#23452) 2023-10-03 08:54:21 -07:00
Kuba Wieczorek
3acfe5ea52 [VAULT-20630] CI: Use 'ref' (not 'base_ref') as a default git reference to check out code in the test-go GHA workflow (#23458) 2023-10-03 14:58:35 +01:00
mickael-hc
6d17a8579e update changelog with links to published advisories (#23424) 2023-10-03 09:21:58 -04:00
Kuba Wieczorek
b300d50799 [VAULT-20630] CI: Fix the CI workflow issue where we check out base ref instead of the ref that triggered the workflow run (#23453) 2023-10-03 12:06:44 +01:00
Angel Garbarino
32059ab250 Bug fix for double slash in LIST endpoint (#23446)
* the fix

* changelog
2023-10-02 14:36:58 -06:00
Yoko Hyakuna
cc6632e2c4 Fix a typo (#23444) 2023-10-02 08:36:36 -07:00
Austin Gebauer
80e1912adb auth/aws: fix panic in IAM-based login when client config doesn't exist (#23366)
* auth/aws: fix panic in IAM-based login when client config doesn't exist

* add changelog

* adds known issue for 1.15.0

* fixes up known issue with workaround

* fix link

* maintain behavior of client config not needing to exist for IAM login

* update changelog
2023-09-30 11:25:56 +09:00
Austin Gebauer
526d0f4502 auth/saml: adds API docs for verbose_logging config (#23370) 2023-09-29 11:15:38 +09:00
Sarah Chavis
8952b69eba Make additional changes (#23416) 2023-09-28 17:24:12 -07:00
Hamid Ghaf
375c2be624 control checking out head instead of base ref by a GH label (#22817)
* control checking out head instead of base ref by a GH label

* move checkout ref to the setup step

* adding a comment
2023-09-29 00:13:01 +00:00
Ryan Cragun
1b321e3e7e test: restart socket sink if it's not listening (#23397)
Signed-off-by: Ryan Cragun <me@ryan.ec>
2023-09-28 22:20:24 +00:00
Ryan Cragun
807bacbc9c test: don't use us-east-1 during an outage (#23396)
An ongoing incident in us-east-1 is impacting CI. We'll temporarily use
Ohio as it's cheaper than California.

Signed-off-by: Ryan Cragun <me@ryan.ec>
2023-09-28 22:20:08 +00:00
Hamid Ghaf
305d6d9b67 merkle corruption checker docs (#22971)
* merkle corruption checker docs

* doc link fix

* fix the link again

* Update website/content/api-docs/system/replication/index.mdx

Co-authored-by: Mike Palmiotto <mike.palmiotto@hashicorp.com>

* Apply suggestions from code review

Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>
Co-authored-by: Mike Palmiotto <mike.palmiotto@hashicorp.com>

* feedback

* Apply suggestions from code review

Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>

---------

Co-authored-by: Mike Palmiotto <mike.palmiotto@hashicorp.com>
Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>
2023-09-28 15:11:16 -07:00
vinay-gopalan
3885bae623 Add small note on revocation statement in GCP CloudSQL documentation (#23301) 2023-09-28 15:08:37 -07:00
Sarah Chavis
d0c23de2b3 [DOCS] Add missing feature info (#23380)
* Add missing feature info
2023-09-28 14:16:34 -07:00
Anton Averchenkov
391bb70313 Docs: remove BETA warning from vault agent process supervisor (#23387) 2023-09-28 15:45:56 -04:00
Angel Garbarino
25d32cbac5 UI: HDS adoption replace <PaginationControls> component (#23317)
* use on change method to change out pagination controls

* remove old paginationControls
2023-09-28 12:49:11 -06:00
Peter Wilson
25bebfa91c removed references to Vault reference architecture on Kubernetes (#23381) 2023-09-28 19:29:10 +01:00
Steven Clark
1188335f6c Bump versions within transit managed key known issues (#23375)
* Bump versions within transit managed key known issues

* Link in partials into 1.15.x upgrade release notes
2023-09-28 12:41:32 -04:00
claire bontempo
09a2a6053b UI: Move pagination outside of {{each}} conditional (#23360)
* move-pagination outside each block

* hide pagination if filtering from toolbar

* move pagination outside each block in leases list
2023-09-28 08:52:18 -07:00
Marc Boudreau
a3936f1467 VAULT-20339: fixed typo in parameter name and moved it to correct section (#23287)
* docs: fixed typo in parameter name and moved it to correct section

* add changelog file
2023-09-28 10:04:32 -04:00
Paul Banks
9fc67b6656 Hopefully fix flaky Consul fencing test (#23280)
* Hopefully fix flaky fencing test when run in Enterprise

* Fix typo
2023-09-28 12:25:52 +00:00
Thy Ton
98e9d0c95e add API docs for plugin runtimes (#23223)
Co-authored-by: Tom Proctor <tomhjp@users.noreply.github.com>
Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>
2023-09-28 05:35:22 +00:00
Ben Ash
a6ee197a73 Docs: bump VSO chart version to 0.3.1 (#23365) 2023-09-27 21:46:41 -04:00
Ben Ash
9ffea8aee5 Update VSO docs for v0.3.0 (#23281)
Doc updates are mostly focused on HCP Vault Secrets support.

---------

Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>
2023-09-27 20:37:39 -04:00