Commit Graph

18722 Commits

Author SHA1 Message Date
hc-github-team-secure-vault-ecosystem
924e79a546 Automated dependency upgrades 2024-01-01 00:26:22 +00:00
claire bontempo
066b4a1808 Secrets sync UI: Round of bug fixes part 2 (#24631)
* include all destomatopm types in list filter VAULT-22916

* move refresh list and clear dataset to finally VAULT-22917

* make empty state link prettier;

* update empty state message to show display name

* update tests

* wrap create destination CTA in enterprise conditional

* include link in p tag
2023-12-22 23:22:54 +00:00
Austin Gebauer
43c282f15a tools: upgrades gofumpt to v0.5.0 (#24637) 2023-12-22 14:36:44 -08:00
Max Coulombe
1cae21fb2f Fix small doc error (#24627)
* fix small doc error for vercel destination

Co-authored-by: Calvin Leung Huang <1883212+calvn@users.noreply.github.com>

---------

Co-authored-by: Calvin Leung Huang <1883212+calvn@users.noreply.github.com>
2023-12-22 09:14:22 -05:00
claire bontempo
f2cc80c282 Secrets Sync UI: Refactor vercel-project destination to expect array from server (#24628)
* fix vercel project to expect array from server

* add test

* use reduce function!
2023-12-21 14:39:05 -08:00
Raymond Ho
0ed86eb1a8 fix race condition on GetWorkerCounts by cloning map (#24616) 2023-12-21 10:28:36 -08:00
Austin Gebauer
84bc8b1743 docs: adds more targeted guidance for GCP workload identity (#24620)
* docs: adds more targeted guidance for GCP workload identity

* hopefully fix markdown
2023-12-21 10:25:08 -08:00
Austin Gebauer
082d2a6412 docs: fix code snippet copy for SAML auth method (#24619) 2023-12-21 08:48:07 -08:00
Justin Clayton
e7838a3594 Add some clarity to retry_join docs (#24605)
This edit was made based on customer feedback
2023-12-20 16:24:38 -08:00
Sarah Chavis
c93c0b39b4 [DOCS] Add how-to guide for containerize plugins (#24537)
Co-authored-by: Yoko Hyakuna <yoko@hashicorp.com>
2023-12-20 14:45:23 -08:00
Mike Palmiotto
3389a572b9 enos: Add Default LCQ validation to autopilot upgrade scenario (#24602)
* enos: Add default lcq validation to autopilot upgrade scenario

* Add timeout/retries to default lcq autopilot test
2023-12-20 15:25:20 -07:00
claire bontempo
0529b11571 Secrets Sync: Bug fixes part 1 (#24580) 2023-12-20 13:08:53 -08:00
Scott Miller
1384aefc69 CE changes for recovery mode docker tests (#24567)
* CE changes for recovery mode docker tests

* more conflicts

* move vars from ent
2023-12-20 10:41:58 -06:00
Marc Boudreau
b1d3f9618e flatten custom messages response structure (#24601) 2023-12-20 11:35:15 -05:00
Sarah Chavis
1d8d80e8de Remove invalid link (#24593) 2023-12-19 19:55:35 +00:00
benz0
954da5006c Update audit.mdx (#24561)
* Update audit.mdx

Per the discussion here: https://hashicorp.enterprise.slack.com/archives/CPEPB6WRL/p1656678311708759

This parameter does not apply to DR replication.
This document should specify that the `local` parameter only applies to performance replication because even with this enabled the audit device configuration is still replicated to a DR cluster. This is also the expected and desired behavior.

* Fixed typos

---------

Co-authored-by: Yoko Hyakuna <yoko@hashicorp.com>
2023-12-19 18:10:53 +00:00
Peter Wilson
d69a308098 refactor audit broker (#24587) 2023-12-19 17:05:30 +00:00
Marc Boudreau
3bdb7006dc VAULT-22535: Make end_time, type, and authenticated optional parameters for UI Custom Messages (#24528)
* make end_time, type, and authenticated optional parameters
authenticated will default to true
type will default to banner
end_time will be nil if not provided meaning it remains active forever

* improve method names

* add some go docs for functions that don't have any

---------

Co-authored-by: Peter Wilson <peter.wilson@hashicorp.com>
2023-12-19 09:16:55 -05:00
miagilepner
0b741c4d58 VAULT-22640: Add secret sync associations to precomputed queries (#24555)
* add support for secret sync associations to precomputed queries

* pr fixes

* update comment
2023-12-19 13:42:38 +00:00
Rachel Culpepper
2c08a2eb83 fix issues with copying config (#24573) 2023-12-18 15:32:35 -06:00
Christopher Swenson
4980cb0fe1 Delete metadata-read event (#24568)
We never generated such an event. This was just a mistake when
I wrote the initial docs.
2023-12-18 10:23:01 -08:00
Kuba Wieczorek
17ffe62d0d [VAULT-22481] Add audit filtering feature (#24558)
* VAULT-22481: Audit filter node (#24465)

* Initial commit on adding filter nodes for audit

* tests for audit filter

* test: longer filter - more conditions

* copywrite headers

* Check interface for the right type

* Add audit filtering feature (#24554)

* Support filter nodes in backend factories and add some tests

* More tests and cleanup

* Attempt to move control of registration for nodes and pipelines to the audit broker (#24505)

* invert control of the pipelines/nodes to the audit broker vs. within each backend

* update noop audit test code to implement the pipeliner interface

* noop mount path has trailing slash

* attempting to make NoopAudit more friendly

* NoopAudit uses known salt

* Refactor audit.ProcessManual to support filter nodes

* HasFiltering

* rename the pipeliner

* use exported AuditEvent in Filter

* Add tests for registering and deregistering backends on the audit broker

* Add missing licence header to one file, fix a typo in two tests

---------

Co-authored-by: Peter Wilson <peter.wilson@hashicorp.com>

* Add changelog file

* update bexpr datum to use a strong type

* go docs updates

* test path

* PR review comments

* handle scenarios/outcomes from broker.send

* don't need to re-check the complete sinks

* add extra check to deregister to ensure that re-registering non-filtered device sets sink threshold

* Ensure that the multierror is appended before attempting to return it

---------

Co-authored-by: Peter Wilson <peter.wilson@hashicorp.com>
2023-12-18 18:01:49 +00:00
Chelsea Shaw
52c02ae41d UI: Add a11y testing (#24476) 2023-12-18 17:03:35 +00:00
Nick Cabatoff
423b58c90b Simplify raft cluster address management in tests (#24560) 2023-12-18 09:42:23 -05:00
Raymond Ho
1b166da3d2 revert stopped method to JobManager (#24526) 2023-12-15 14:28:25 -08:00
Nick Cabatoff
f460a69ad9 Simplify raft tests, use inmem networking instead of address providers (#24557) 2023-12-15 12:28:32 -05:00
Nick Cabatoff
763095fec6 Don't touch ActiveTime in preSeal/postUnseal (#24549) 2023-12-15 13:59:29 +00:00
Peter Wilson
24c6e82a84 Remove old audit behavior from test code (#24540)
* Export audit event

* Move older tests away from audit behavior that didn't use eventlogger

* spelling--;

* no more struct initialization of NoopAudit outside of NewNoopAudit

* locking since we're accessing the shared backend
2023-12-15 09:26:34 +00:00
Chelsea Shaw
f0d8dab056 UI: Obscure values for nested KV v2 secret (#24530)
* Add obfuscateData method and tests

* add obscure option to JsonEditor + tests

* Enable obscured values for KV v2 details when secret is advanced

* coverage on kv acceptance test

* Add changelog
2023-12-14 19:55:45 +00:00
claire bontempo
2c19bbe145 Consistently refer to Key Value secrets engine as KV (#24529)
* VAULT-21427 change ui references from K/V to KV

* references in docs/

* website json data

* go command errors

* replace Key/Value with Key Value

* add changelog

* update test

* update secret list header badge

* two more test updates
2023-12-14 11:28:58 -08:00
Kianna
3547dcfcb3 UI: Update radio form field to have group styles and label/subtext (#24542)
* Add radio form field

* Add some tests!

* Address feedback
2023-12-14 19:01:57 +00:00
Theron Voran
7801d2dea2 docs/vault-secrets-operator: aws vaultauth (#23982)
Adding an overview doc for using AWS auth with Vault Secrets Operator
under Secret Sources/Vault/Auth Methods/.

Had to move the AWS and GCP auth pages down one directory to get
around a "mismatched parent directories" error.

---------

Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>
2023-12-14 10:51:10 -08:00
Mike Wickett
a67afead98 readme: update links to tutorials and certifications (#24467)
* readme: update links to tutorials and certifications

* fix typo

Co-authored-by: Peter Wilson <peter.wilson@hashicorp.com>

---------

Co-authored-by: Peter Wilson <peter.wilson@hashicorp.com>
2023-12-14 18:24:02 +00:00
Chelsea Shaw
144ccd686b UI: Show correct nav items when in chroot namespace (#24492) 2023-12-13 23:06:31 +00:00
owenzorrin
7df1b64a3d Update ldap.mdx (#24338)
add missing use_token_groups parameter

* use_token_groups - (Optional) Use the Active Directory tokenGroups constructed attribute of the user to find the group memberships
https://registry.terraform.io/providers/hashicorp/vault/latest/docs/resources/ldap_auth_backend#use_token_groups
2023-12-13 15:06:20 -08:00
Chip Stepowski
67ad37cc50 Automated snapshots info and perf replication.mdx (#23985)
Include automated snapshots info regarding perf replication.mdx
---------

Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>
2023-12-13 13:53:00 -08:00
Chelsea Shaw
e122ce80de UI: better calculation for advanced secret in KV v2 (#24513)
* Add util for determining whether secret data is advanced

* Add test coverage for bug

* use non-dumb logic for detecting advanced object

* Add changelog

* Add header

* Move util to core

* Add escaped newline to test coverage

* headers again *eyeroll*
2023-12-13 21:38:43 +00:00
benz0
ac1e9194da Update aws.mdx (#23527)
Added clarification for 32 character limit on STS tokens.
Forcing suggestion commit so we can merge and publish the changes.

---------

Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>
2023-12-13 13:37:07 -08:00
ram-parameswaran
6a2ff07ba2 Document Vault Default Password Policy (#23939) 2023-12-13 13:31:12 -08:00
Sean Ellefson
98d0125960 Adding note about node-id being generated when unset (#24101)
* Adding note about `node-id` being generated when unset

* Update website/content/docs/configuration/storage/raft.mdx

* Correct linter error

---------

Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>
2023-12-13 21:15:57 +00:00
Sean Ellefson
c7a7b0a2d2 Added vault operator raft snapshot inspect usage (#24083)
* Added `vault operator raft snapshot inspect` usage

* Update website/content/docs/commands/operator/raft.mdx

Forcing suggestion commit so we can merge and publish the changes.

---------

Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>
2023-12-13 13:14:42 -08:00
Sokren
a58c3a9850 Update azurekv.mdx change line 37 stores to destinations (#24374) 2023-12-13 12:42:09 -08:00
Sungyoon Jeong
7336cf70ad docs: fix typo in aws.mdx (#24435) 2023-12-13 12:37:13 -08:00
Jordan Reimer
99445dbfd4 Secrets Sync (#23667)
* Ember Engine Setup for Secrets Sync (#23653)

* ember engine setup for secrets sync

* Update ui/lib/sync/addon/routes.js

Co-authored-by: claire bontempo <68122737+hellobontempo@users.noreply.github.com>

---------

Co-authored-by: claire bontempo <68122737+hellobontempo@users.noreply.github.com>

* Sync Mirage Setup (#23683)

* adds mirage setup for sync endpoints

* updates secret_name default in sync-association mirage factory

* UI Secrets Sync: Ember data sync destinations (#23674)

* add models

* adapters

* base model adapter

* update test response

* add sync destinations helper

* finish renaming base destination model/adapter

* add comment

* add serializer

* use normalizeItems instead

* destination serializer test

* add destination find method;

* add conditional operand

* UI Secrets Sync: Overview landing page (#23696)

* add models

* adapters

* base model adapter

* update test response

* add sync destinations helper

* finish renaming base destination model/adapter

* add comment

* add serializer

* doc-link helper

* add version service

* landing and overview component

* overview page

* add tests

* UI Secrets Sync: Destinations adapter add LIST (#23716)

* add models

* adapters

* base model adapter

* update test response

* add sync destinations helper

* finish renaming base destination model/adapter

* add comment

* add serializer

* doc-link helper

* add version service

* landing and overview component

* overview page

* build out serializer and adapters

* update mirage

* fix merge conflicts

* one more conflict!

* pull transformQueryResponse to separate method in adapter

* move data transforming all to serializer and tests

* add note to paginationd ocs
docs

* conditionally render CTA

* add lazyPaginatedQuery method to destinations route

* remove partial error

* Secrets Sync: Destinations create - select type (#23792)

* add category to destinations

* build select type page

* refactor prompt config situation

* routing for destinations

* update select-type routing

* make card width fixed

* revert CTA routing change, keep shouldRenderOverview

* add header for gif demo to form

* cleanup scope

* more scope cleanup

* add test

* add type selector

* rename components

* rename again

* remove async

* fix tests

* fix select type rename in test

* delete renamed test

* fix import of general selectors

* rename using component syntax

* UI Secrets Sync: Create destination form and route (#23806)

* add model attribute metadata

* add form and save url, remove name and type from serializer

* move checkbox list to form field helper

* add styling to alert inline

* use newly made class

* fix cancel action and cleanup form

* change quotes

* remove checkbox action from form component

* add tests

* address feedback

* add API error test

* use create record method instead

* adapter test for create record

* return from find method if type is undefined

* cleanup test selectors

* secrets sync: refactor sync destinations helper (#23839)

* refactor getter in base destination model

* add getters back to model

* Secrets sync UI: Destination details page (#23842)

* change labels to match params

* add maskedParams to base model

* add details route

* add details view;

* update mirage

* fix secrets sync link;

* delete parent destination route

* add copyright header

* add secrets route

* move sync route outside of secrets/ route

* upate mirage

* export to-label

* finish tests

* make ternary

* rename header tabs

* fix selector in test

* Secrets Sync UI: Cleanup headers + tabs (#23873)

* remove destination header component, add headers/tabs to all routes

* fix header padding

* move tabs + toolbar back into component...

* add copyright header

* add delete modal

* lol revert again

* add extra line after copyright header

* Secrets Sync Destinations List View (#23949)

* adds route and page component for sync destinations list view

* filters by type first for sync destinations

* adds test for store.filterData method

* Update ui/app/services/store.js

Co-authored-by: Kianna <30884335+kiannaquach@users.noreply.github.com>

* updates nav link label for secrets sync

* moves sync destinations types out of app-types

* moves loading-dropdown-option component to core addon and adds to destination list item menu

* change true assertion to deepEqual in sync destinations test

* adds copyright header to sync-destinations type file

* clear store dataset on sync destination create

---------

Co-authored-by: Kianna <30884335+kiannaquach@users.noreply.github.com>

* Sync Destinations Capabilities (#23953)

* adds route and page component for sync destinations list view

* filters by type first for sync destinations

* adds test for store.filterData method

* adds capabilities checks for sync destinations

* removes canList from sync destinations capabilities

* updates sync header tests

* Update ui/tests/integration/components/sync/sync-header-test.js

Co-authored-by: claire bontempo <68122737+hellobontempo@users.noreply.github.com>

* updates sync destination response serialization

* updates sync destination serializer test

* updates sync destinations page test assertions

* fixes mirage sync destinations payload issue

* removes commented out method in sync destination adapter

* fixes inconsistencies with url generation for sync destinations delete

* fixes sync destinations page test

---------

Co-authored-by: claire bontempo <68122737+hellobontempo@users.noreply.github.com>

* Sync Associations Ember Data Setup (#24132)

* adds model, adapter and serializer for sync associations

* updates sync association adapter save methods to use adapterOptions to determine action

* Sync Destination Secrets Route and Page Component (#24155)

* renames sync destination header component and adds tests

* adds destination secrets route and page component

* adds setup-models helper for sync testing

* moves destination details test into subdir

* adds destination secrets page component tests

* adds controller for destination secrets route

* fixes pagination route on destination secrets view

* fixes sync association updated_at assertion based on timezone

* updates kv secret details external route name

* updates usage of old spacing style variable after merge

* use confirm action instead of contextual confirm (old) component (#24189)

* UI Secrets Sync: Adds secret status to kv v2 details page (#24208)

* woops! missed this styling for confirm action swap

* update link to go to destination secrets

* change edit to view secret from destination secrets list

* add synDestination to external routes for kv engine

* add sync status badge component

* export from addon

* splaattributes

* poll sync status for kv secret details and render

* move from controller to component

* update name to new destinationName key

* reorder list view items

* add refresh button

* add mirage data

* change to loading static

* update icons to be sync specific

* change name

* move button and change fetch to concurrency task

* add tests to kv details

* add color assertion

* add copyright header

* small test tweaks

* Update ui/tests/integration/components/sync-status-badge-test.js

* fixes test

---------

Co-authored-by: Jordan Reimer <zofskeez@gmail.com>

* Sync Secrets to Destination (#24247)

* fixes issue with filter-input debounce and updates to spread attributes for input rather than use args

* adds destination sync page component

* removes unused var in sync component

* adds test for manual mount path input in sync view

* updates mount filtering in destinations sync page to target kv v2

* Secrets Sync Landing Page Images (#24277)

* updates sync landing page to add marketing images

* removes top margin from sync landing-cta

* adds aria-describedby to sync landing images

* UI Secrets Sync: Serialize trailing slash from destination type  (#24294)

* remove trailing slash from type in  destination LIST response

* update keys in mirage and tests

* Sync Overview (#24340)

* updates landing-cta image to png with matching height

* adds ts definitons for sync adapters

* updates sync adapters and serializers to add methods for fetching overview data

* adds sync associations list handler to mirage and seeds more associations in scenario

* adds table and totals cards to sync overview page

* adds sync overview page component tests

* fixes tests

* changes lastSync key to lastUpdated for sync fetchByDestinations response

* adds emdash as placeholder for lastUpdated null value in secrets by destination table

* updates to handle 0 associations state for destination in overview table

* Secrets Sync UI: Add loading and error substates (#24353)

* add error substate

* add loading substates

* delete loading from secrets route

* Remove is-version Helper (#24388)

* removes is-version helper and injects service into components

* updates sync tests using version service to new API

* adds comment back for tracked property in secret detials page component

* updates sync tests to use common selectors (#24397)

* update capitalization to consistently be titlecase, fix breadcrumb selector

* clears sync associations from store on destination sync page component destroy (#24450)

* KV Suggestion Input (#24447)

* updates filter-input component to conditionally show search icon

* adds kv-suggestion-input component to core addon

* updates destination sync page component to use KvSuggestionInput component

* fixes issue in kv-suggestion-input where a partial search term was not replaced with the selected suggestion value

* updates kv-suggestion-input to retain focus on suggestion click

* fixes test

* updates kv-suggestion-input to conditionally render label component

* adds comments to kv-suggestion-input regarding trigger

* moves alert banner in sync page below button set

* moves inputId from getter to class property on kv-suggestion-input

* Secrets Sync UI: Editing a destination (#24413)

* add form field groups to sync models

* update create-and-edit form to use confirmLeave and enableInput component

* enable input component

* add more stars

* update css comments

* Update ui/app/styles/helper-classes/flexbox-and-grid.scss

* make attrOptions optional

* remove decorator

* add env variables to subtexr

* add subtext to textfile

* fix overviwe transition bug

* remove breadcrumbs to getter

* WIP adapter update

* update mirage response

* add update method with PATCH

* add patch to application adapter

* fix typo

* finish tests

* remove validations because could use environment variables

* use getter and setter in model

* move update record business to serializer

* rest of logic in serializer;
gp
;
gp

* add model validation warnings

* cleanup getters

* pull create/update logic into method for mirage

* add test for validation warning

* update KV copy

* Sync Success Banner (#24491)

* adds success banner to destination sync page

* move submit disabled logic to getter in destination sync page

* adds id and for attributes to kv mount input in sync page

* hides sync success banner on submit

* use Sync secrets everywhere (remove new) (#24494)

* use Sync secrets everywhere (remove new)

* revert test name change

* Sync Destinations List Filter Bug (#24496)

* fixes issues filtering destinations list

* adds test

* fixes Sync now action text alignment in destination secrets list

* UI Secrets sync: Add purge query param to delete endpoint (#24497)

* adds updated_at to mirage set association handler

* adds changelog entry

* add enterprise in parenthesis for changelog

* addres a11y feedback

---------

Co-authored-by: claire bontempo <68122737+hellobontempo@users.noreply.github.com>
Co-authored-by: clairebontempo@gmail.com <clairebontempo@gmail.com>
Co-authored-by: Kianna <30884335+kiannaquach@users.noreply.github.com>
2023-12-13 11:16:44 -08:00
Rachel Culpepper
0fdd8237a6 refactor createDockerImage to be more general (#24503) 2023-12-13 13:02:54 -06:00
Steven Clark
b8050c518e Quote example domains within ACME entity docs (#24508)
- The existing bare *.test.com triggered italics and stripped the *
   from the output
2023-12-13 12:45:28 -05:00
Steven Clark
e24301e32d Update ACME entity assignment examples (#24501)
- Attempt to make the various examples for how we generate entity tokens when leveraging ACME clearer.
2023-12-13 12:21:50 -05:00
Mattias Fjellström
e4ffe8979c Command: token capabilities using accessor (#24479)
* Command: token capabilities using accessor

* release note

* Apply suggestions from code review

Co-authored-by: Marc Boudreau <marc.boudreau@hashicorp.com>

---------

Co-authored-by: Marc Boudreau <marc.boudreau@hashicorp.com>
2023-12-13 11:15:21 -05:00
Tom Proctor
dc5c3e8d97 New database plugin API to reload by plugin name (#24472) 2023-12-13 10:23:34 +00:00
Peter Wilson
486df81934 Audit related foibles (#24493)
* update node and pipeline registration to prevent overwriting, strip some unused bits of NewTestCluster, tweak to prevent auditing on a test that is flaking

* tidy imports
2023-12-13 09:08:02 +00:00