Commit Graph

18644 Commits

Author SHA1 Message Date
David De Leon
26ff3a308c move logger start function call closer to lockout entry creation 2023-12-15 14:36:30 -05:00
David De Leon
356af5b822 add test 2023-12-15 11:35:41 -05:00
David De Leon
efd47209e3 make funcion pointer atomic 2023-12-07 10:08:46 -05:00
David De Leon
041726351c add changelog 2023-12-07 10:08:46 -05:00
David De Leon
4cb7cdf692 fix test 2023-12-07 10:08:46 -05:00
David De Leon
279007ec4f fix test 2023-12-07 10:08:46 -05:00
David De Leon
f459ede59a create func to get locked user count, and fix potential deadlock 2023-12-07 10:08:46 -05:00
David De Leon
e9913f367d make user lockout log interval configurable 2023-12-07 10:08:46 -05:00
David De Leon
341955e169 formatting 2023-12-07 10:08:46 -05:00
David De Leon
ea8b6bf3c9 implement user lockout logger 2023-12-07 10:08:46 -05:00
Tom Proctor
a4180c193b Refactor plugin catalog and plugin runtime catalog into their own package (#24403)
* Refactor plugin catalog into its own package
* Fix some unnecessarily slow tests due to accidentally running multiple plugin processes
* Clean up MakeTestPluginDir helper
* Move getBackendVersion tests to plugin catalog package
* Use corehelpers.MakeTestPlugin consistently
* Fix semgrep failure: check for nil value from logical.Storage
2023-12-07 12:36:17 +00:00
miagilepner
959d548ac6 Add PATCH to CORS allowed request methods (#24373)
* add PATCH to cors request methods

* changelog
2023-12-07 11:27:35 +01:00
Victor Rodriguez
8a46bee768 Fix recovery mode check for seal migration configuration. (#24398)
With the introduction of the Seal High Availability feature, the presence of
multiple seals in configuration does not necessarily mean that the configuration
entails a seal migration.

Instead of checking for multiple seals, check for the presence on an "unwrap"
seal, which is only used for seal migrations.
2023-12-06 16:37:48 -05:00
claire bontempo
94ca1ebaab add a tags to breadcrumb test selectors (#24410) 2023-12-06 20:51:44 +00:00
Meggie
2aaeb55a4d Clarify Vault versions, some upgrade guidance (#24396)
* Creating a Vault version explainer

The explainer is a partial that can be used on multiple pages. It gives an overview of our policies and version format and offers some recommendations about staying current.

* Apostrophe typo

Not saying I got all the typos, but got one anyway.

* Add a note about the very rare 4th digit

* Conform to subtitle best practices

Co-authored-by: Yoko Hyakuna <yoko@hashicorp.com>

---------

Co-authored-by: Yoko Hyakuna <yoko@hashicorp.com>
2023-12-06 15:36:48 -05:00
Austin Gebauer
1484253e0b identity/oidc: lazily generate default key (#24332)
* identity/oidc: lazily generate default key

* invalidate the key cache on lazy generation

* consistent error messages

* change key rotation test to check exact counts and add comments

* adds comments on ensureDefaultKey and lazyGenerateDefaultKey

* adds comment on holding write lock
2023-12-06 12:04:11 -08:00
claire bontempo
3403203471 UI: HDS adoption replace Breadcrumbs (#24387)
* upgrade to 3.1.0

* VAULT-22471 upgrade to latest version

* fix other selectors

* fix pki tests

* fix copy dropdown

* generated breadcrumbs

* mfa crumbs

* oidc crumbs

* identity crumbs

* use hds crumbs in page::breadcrumbs file

* rename selectors to be consistent

* remaining oidc

* update empty state link style to match hds

* repl empty state

* rep empty state 2

* policy and secret error template

* replace yielded KeyValueHeader elements directly with HDS breadcrumbs

* remove yield from KeyValueHeader

* use key value header in secret header

* update pki header

* kmip breadcrumbs

* replace key-value-header classes

* ssh sign

* replace key value with breadcrumbs

* update selectors part 1

* add a tags

* policy tests

* add crumb index back

* add current route to generated item

* another round of test updates

* remove root link test selector

* secrets/secrete test

* add changelog

* trailing icon

* delete breadcrumb css

* consistently change to sentence case

* titlsecase!
2023-12-06 10:56:01 -08:00
Ikko Eltociear Ashimine
5bb1451f94 Fix typo in seal.go (#24392)
succesful -> successful
2023-12-06 08:48:32 -05:00
Peter Wilson
7e37f7690d update testing 'initCores' to enable audit after all unsealing and before enabling KV (#24395) 2023-12-06 12:39:06 +00:00
claire bontempo
8f69e49592 UI: HDS Adoption upgrade to design-system-components: 3.3.0 and ember-flight-icons: 4.0.4 (#24366)
* upgrade to 3.1.0

* VAULT-22471 upgrade to latest version

* fix other selectors

* fix pki tests

* fix copy dropdown

* rename selectors to be consistent
2023-12-05 13:49:36 -08:00
Chelsea Shaw
588dd73fe0 UI: handle reduced disclosure on replication endpoints (#24379)
* add replicationRedacted attribute to cluster model

* disallow access to replication pages if repl endpoints are redacted

* hide replicatio nav item

* Hide replication card on dashboard
2023-12-05 14:31:29 -06:00
Steven Clark
a41852379b Document and augment tests that PKI accepts 8192 bit RSA keys (#24364)
- Noticed that our documentation was out of date, we allow 8192
   bit RSA keys to be used as an argument to the various PKI
   issuer/key creation APIs.
 - Augument some unit tests to verify this continues to work
2023-12-05 15:26:03 -05:00
Chelsea Shaw
807aa51d7d UI: fix ent tests (#24375) 2023-12-05 18:04:33 +00:00
Peter Wilson
fcbdd5bd22 Adjust TestSudoPaths to remove audit (#24357) 2023-12-05 11:28:11 +00:00
Ben Ash
9e063f31d7 Update VSO docs for v0.4.1 (#24356) 2023-12-04 20:29:31 -05:00
divyaac
6e020e38e0 Add_Chroot_Namespace_In_Response (#24355) 2023-12-04 14:51:44 -08:00
Milena Zlaticanin
aa9b02307d Update Azure Secrets docs (#24279) 2023-12-04 15:41:25 -07:00
Hamid Ghaf
aeb817dfba Buffer body read up to MaxRequestSize (#24354) 2023-12-04 13:22:22 -08:00
Chelsea Shaw
cb217388d4 UI: handle reduced disclosure endpoints (#24262)
* Create app-footer component with tests

* glimmerize vault route + controller

* Add dev mode badge to new footer

* Fix version on dashboard

* update app-footer tests

* update version title component

* Handle case for chroot namespace fail on health check

* cleanup

* fix ent tests

* add missing headers

* extra version fetch on login success, clear version on logout and seal

* Add coverage for clearing version on seal

* rename isOSS to isCommunity

* remove is-version helper

* test version in footer on unseal flow

* fix enterprise test

* VAULT-21399 test coverage

* VAULT-21400 test coverage
2023-12-04 14:28:16 -06:00
Scott Miller
e3aa18c7f7 Make it possible to skip the seal re-wrap in progress check (#24351) 2023-12-04 13:31:05 -06:00
Christopher Swenson
6ed8b88f5f Switch from mitchellh/cli to hashicorp/cli (#24239)
@mitchellh suggested we fork `cli` and switch to that.

Since we primarily use the interfaces in `cli`, and the new
fork has not changed those, this is (mostly) a drop-in replacement.

A small fix will be necessary for Vault Enterprise, I believe.
2023-12-04 11:05:02 -08:00
Scott Miller
91ec1a788b Only use the short persistKeyring timeout for encryption count tracking (#24336)
* Only use the short persistKeyring timeout for encryption count tracking

* changelog

* accidental paste
2023-12-04 12:36:55 -06:00
Nick Cabatoff
b8f531142b Use our heartbeat echo RPCs to estimate clock skew, expose it in status APIs (#24343) 2023-12-04 12:04:38 -05:00
hc-github-team-es-release-engineering
02eadb8ecb Update LICENSE (#24264)
* Update LICENSE

* Update LICENSE

---------

Co-authored-by: Meggie <meggie@hashicorp.com>
2023-12-04 16:57:30 +00:00
Chelsea Shaw
af3901e256 UI: Update replication nav (#24283)
* replication gets its own subnav

* glimmerize replication-summary-card

* Simplify replication-summary-card

* update replication subnav + tests

* replication action block uses HDS card

* add/update test selectors

* test coverage

* Add changelog

* Update defaults on replication-summary-card

* test that the view updates between replication types

* typo
2023-12-04 10:40:34 -06:00
Meggie
9082ebc996 Update LICENSE for 1.15.3 (#24346) 2023-12-04 10:55:10 -05:00
Nick Cabatoff
31ccb2667a Ensure that Autopilot sees all nodes in KnownServers at outset (#24246) 2023-12-04 09:31:16 -05:00
Nick Cabatoff
85b3dba310 Rework sys/health tests to use structs and cmp (#24324) 2023-12-04 08:34:25 -05:00
Sarah Thompson
699fc035e0 Remove release-engineering as codeowners (#24237) 2023-12-03 10:38:45 +00:00
Rachel Culpepper
73df860e90 Vault-14651: add function for restarting cluster nodes (#24335)
* add function for restarting cluster nodes

* fix import
2023-12-01 22:07:44 +00:00
Meggie
22cbf23f47 changelog++ (#24329) 2023-12-01 16:21:39 -05:00
Raymond Ho
73f46fca3e optimize NewTestCluster (#24300) 2023-12-01 11:30:58 -08:00
Mike Palmiotto
4a7bee5a02 Always forward entity merge requests from perfStandby (#24325)
Update requests to /sys/identity/entity/merge perform merges on perfStandby nodes in memory and skip the persist call.

This commit changes the behavior for the merge endpoint, forcing it to be forwarded from the standby to the active node. This change is specifically scoped to manual merges, as automatic merges are not isolated to a specific endpoint and require careful consideration for all callers.
2023-12-01 08:47:32 -06:00
Peter Wilson
06b9325bb9 fix -log-file so that it uses the correct name and only adds timestamps on rotation (#24297)
* fix -log-file so that it uses the correct name and only adds timestamps on rotation

* added some tests for naming/rotation

* changelog

* revert to previous way of getting created time

* remove unused stat

* comment shuffle

* Update changelog/24297.txt

Co-authored-by: Violet Hynes <violet.hynes@hashicorp.com>

* Update website/content/docs/agent-and-proxy/agent/index.mdx

Update 'agent' docs page

Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>

* Update website/content/docs/agent-and-proxy/proxy/index.mdx

Update 'proxy' docs page

Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>

* Update website/content/docs/commands/server.mdx

Update 'server' docs page

Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>

* fix typos

---------

Co-authored-by: Violet Hynes <violet.hynes@hashicorp.com>
Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>
2023-12-01 11:30:34 +00:00
miagilepner
96281c4310 split out reloadSealsEnt (#24320) 2023-12-01 10:41:02 +00:00
claire bontempo
61ee28ba3b UI: HDS adoption update <AlertInline> component to use Hds::Alert (#24299)
* replace paddingTop with clas

* use hds alert for AlertInline component

* remve isSmall arg

* add test selector back

* remove mimicRefresh arg

* update assertion for alert inline component

* update string-list

* use alert inline for string-list

* add changelog

* update block instances of alert inline

* remove p tags from test selectors

* minor cleanup
2023-12-01 00:57:32 +00:00
Hamid Ghaf
db1170576f only update license changes in ui related files in ui precommit hook (#24313) 2023-11-30 22:47:38 +00:00
Rachel Culpepper
638522ebac Vault-18638: add seal reload on SIGHUP (#23571)
* reload seals on SIGHUP

* add lock in SetSeals

* move lock

* use stubmaker and change wrapper finalize call

* change finalize logic so that old seals will be finalized after new seals are configured

* add changelog

* run make fmt

* fix fmt

* fix panic when reloading seals errors out
2023-11-30 15:08:13 -06:00
Angel Garbarino
9ddc33ab98 Fixes redirects to KV engine when secret is a directory (#24281)
* fix

* changelog

* Update 24281.txt

* add test coverage

* dont make assumptions about list
2023-11-30 13:46:39 -07:00
Raymond Ho
f5622a677a bump eventlogger dependency to v0.2.7 (#24305) 2023-11-30 20:05:25 +00:00