Commit Graph

18644 Commits

Author SHA1 Message Date
hc-github-team-secure-vault-core
b7a97cba92 Update hashicorp/vault-plugin-secrets-mongodbatlas to v0.10.2 (#23849)
* Automated dependency upgrades

* Add changelog

---------

Co-authored-by: hc-github-team-secure-vault-ecosystem <hc-github-team-secure-vault-ecosystem@users.noreply.github.com>
2023-10-26 09:23:42 -04:00
Andreas Gruhler
548b7a094b Fix backticks for cluster_aia_path (#23845) 2023-10-26 08:28:16 -04:00
akshya96
8c95d904f7 Fix segments fragments loss (#23781)
* add ent changes

* add changelog

* make fmt
2023-10-25 21:02:58 +00:00
Violet Hynes
363557d045 VAULT-19232 Add static secret capability manager to Vault Proxy (#23677)
* VAULT-19232 static secret capability manager so far

* VAULT-19232 mostly finish renewal job logic

* VAULT-19232 some clean up, tests, etc

* VAULT-19232 integrate capability manager with proxy, add E2E test

* VAULT-19232 boltdb stuff

* VAULT-19232 finishing touches

* VAULT-19232 typo

* VAULT-19232 add capabilities index cachememdb tests

* Remove erroneous "the"

Co-authored-by: Kuba Wieczorek <kuba.wieczorek@hashicorp.com>

---------

Co-authored-by: Kuba Wieczorek <kuba.wieczorek@hashicorp.com>
2023-10-25 16:43:24 -04:00
Jonathan Frappier
c0ad3f6ce2 Update link for MongoDB Atlas database secrets engine (#23831)
* Update link for MongoDB Atlas database secrets engine

* Fix callout spacing
2023-10-25 15:17:43 -04:00
Cinthia Conti
b0b4851ac1 Update CHANGELOG.md for 1.15.1, 1.14.5, 1.13.9 (#23815)
* Update CHANGELOG.md for 1.15.1, 1.14.5, 1.13.9

* Update CHANGELOG.md

Co-authored-by: Meggie <meggie@hashicorp.com>

* Update CHANGELOG.md

Co-authored-by: Meggie <meggie@hashicorp.com>

* remove entry from changelog

---------

Co-authored-by: Meggie <meggie@hashicorp.com>
2023-10-25 15:01:02 -04:00
Theron Voran
8d7c81019b docs/vault-k8s: v1.3.1 release updates (#23826) 2023-10-25 11:56:08 -07:00
Chelsea Shaw
d562cd50dc UI: fix changelog anchor (#23821) 2023-10-25 17:41:52 +00:00
Chelsea Shaw
080538fd19 Add copyright headers to reset-password code (#23822) 2023-10-25 12:24:16 -05:00
Angel Garbarino
6de5b2fb3c Update packages and OpenApi styling (#23700)
* update packages

* changelog

* wip better

* clean up

* and it works, it always worked we just hid it working :/

* clean up

* playing around with adding the queryparam, not working

* the fix no queryparams

* lets just see how this works out.

* maybe this will help

* remove copy/pasta

* Update ui/lib/open-api-explorer/addon/components/swagger-ui.js

Co-authored-by: Jordan Reimer <zofskeez@gmail.com>

---------

Co-authored-by: Jordan Reimer <zofskeez@gmail.com>
2023-10-25 17:06:06 +00:00
Yoko Hyakuna
adb025542c Fix reported link issue (#23813) 2023-10-25 08:38:45 -07:00
Cinthia Conti
7b1fa4fa15 Update LICENSE to 1.15.1 (#23816)
Update LICENSE to 1.15.1
2023-10-25 10:06:45 -04:00
Peter Wilson
3d37a2507b Use two differing timeouts for keyring persistence (#23796)
* add two differing timeouts to keyring persistence

* typo

* Removed second longer timeout and using supplied ctx

* make fmt strangeness
2023-10-24 22:43:42 +01:00
Chelsea Shaw
3fdb3bec85 UI: mirage endpoints for reduced disclosure (#23807) 2023-10-24 15:51:31 -05:00
Chelsea Shaw
3337035de7 UI: Clean up date-format and tests (#23799) 2023-10-24 20:46:59 +00:00
Chelsea Shaw
b7708875e1 UI: Allow userpass user to update their own password (#23797) 2023-10-24 20:01:30 +00:00
Steven Clark
a10685c521 Pin curl docker image to a specific docker version instead of latest (#23763)
- Try to avoid these build failures as our proxy does seem to have
   issues around pulling images with the 'latest' tag at times.

```
acme_test.go:206:
	Error Trace:	/home/runner/actions-runner/_work/vault-enterprise/vault-enterprise/builtin/logical/pkiext/pkiext_binary/acme_test.go:206
          	        /home/runner/actions-runner/_work/vault-enterprise/vault-enterprise/builtin/logical/pkiext/pkiext_binary/acme_test.go:75
	Error:      	Received unexpected error:
				container create failed: Error response from daemon: No such image: docker.mirror.hashicorp.services/curlimages/curl:latest
	Test:       	Test_ACME/group/caddy_http_eab
	Messages:   	could not start cURL container
```
2023-10-24 10:04:23 -04:00
Jordan Reimer
dff1d5d443 fixes flaky policies test (#23798) 2023-10-23 15:08:24 -06:00
Steven Clark
3623dfc227 Add support for plugins to specify binary request paths (#23729)
* wip

* more pruning

* Integrate OCSP into binary paths PoC

 - Simplify some of the changes to the router
 - Remove the binary test PKI endpoint
 - Switch OCSP to use the new binary paths backend variable

* Fix proto generation and test compilation

* Add unit test for binary request handling

---------

Co-authored-by: Scott G. Miller <smiller@hashicorp.com>
2023-10-23 17:04:42 -04:00
Robert
0df5b14b64 Update 23010 changelog (#23794) 2023-10-23 18:46:42 +00:00
Hamid Ghaf
87376a1f5c Normalize error response messages when invalid credentials are provided (#23786)
* Normalize error response messages when invalid credentials are provided

* CL

* Update changelog/23786.txt

Co-authored-by: Violet Hynes <violet.hynes@hashicorp.com>

---------

Co-authored-by: Peter Wilson <peter.wilson@hashicorp.com>
Co-authored-by: Violet Hynes <violet.hynes@hashicorp.com>
2023-10-23 15:59:26 +00:00
Hamid Ghaf
4281487b07 run copywrite headers (#23788) 2023-10-23 15:53:56 +00:00
claire bontempo
db4819427a docs/add line separators to curl requests secrets sync (#23681)
* add line separators to curl requests

* revert unsync change
2023-10-23 08:29:26 -07:00
Violet Hynes
aeb6d14ebd Update the default kv factory to kv.Factory (#23584)
* Update the default kv mount to kv.Factory

* Imports

* Set some tests that care about leaseapssthroughbackend to use it

* extra newline

* More test updates

* Test updates

* Refactor KV mounting in tests

* Re-add comment
2023-10-23 11:20:22 -04:00
Nick Cabatoff
c64e0144f6 Use the same approach as we do in our other workflows: apply to PRs, and to pushes to our main and release branches. (#23785) 2023-10-23 14:27:13 +00:00
claire bontempo
a5b60cd8cc UI: move selectable card to add-on (#23739)
* remove title-number class and consolidate border radius

* move selectable card to core addon

* add top padding to db cards

* update transform icon color

* new selectable card component

* fix db test

* use selectable card in mount backend form

* fix query param for overview card

* update tests

* fix replication card styling

* make card accessible;

* update tabindex

* change to standalone for error handling

* update test selector

* update tests

* go back to number only css class

* fix on click tests

* add changelog

* update class name in template file

* delete box radio
2023-10-20 15:10:49 -07:00
John-Michael Faircloth
b2870dd23f docs: add example plugin logging (#23779) 2023-10-20 14:43:17 -07:00
Theron Voran
fe55cbbf05 docs/vault-secrets-operator v0.3.4 release update (#23775) 2023-10-20 11:21:57 -07:00
davidadeleon
72d66e2813 Fix consul token revocation with namespace and admin partition specific policies (#23010)
* fix lease revocation when config token exists in one namespace but can create tokens in another

* add test

* Add similar check for admin partition

* Add admin partition test

---------

Co-authored-by: robmonte <17119716+robmonte@users.noreply.github.com>
2023-10-20 13:06:20 -05:00
John-Michael Faircloth
2e85fdebbe plugins: allow all log levels for external plugins (#23771)
* plugins: allow all log levels for external plugins

* changelog
2023-10-20 12:13:06 -05:00
claire bontempo
6ac6030cb3 UI: check path change against all mountable backends (#23749)
* reset path when user clicks back from mount backend form

* update test
2023-10-20 09:06:43 -07:00
modrake
eca4b4d801 Relplat 897 copywrite fixes for mutliple licenses (#23722) 2023-10-20 08:40:43 -07:00
davidadeleon
8b15e7d216 Revert "Implement user lockout log (#23140)" (#23741)
This reverts commit 92fcfda8ad.
2023-10-20 11:21:18 -04:00
Jordan Reimer
01d5d1dc3a KV Download Value Stringify Toggle (#23747)
* adds stringify toggle to masked-input download modal

* updates stringify toggle copy and adds a test

* adds changelog entry
2023-10-20 08:56:14 -06:00
Chelsea Shaw
13523b5a69 UI: Show token expiring warning (#23143) 2023-10-20 14:28:02 +00:00
Chelsea Shaw
0c59d51e3a UI: Replace buttons for HDS in component templates (#23698) 2023-10-20 14:23:55 +00:00
Jason O'Donnell
28e3b78e8e api/plugins: add tls-server-name arg for plugin registration (#23549)
* api/plugins: add tls-server-name arg for plugin registration

* changelog
2023-10-20 10:05:21 -04:00
Peter Wilson
9739270d7b ensure we are handling the error returned from attempting to set the rotation config (#23751) 2023-10-20 12:28:31 +00:00
Steven Clark
b990ec9720 Fix changelog entry formatting (#23753) 2023-10-20 12:18:22 +00:00
miagilepner
8fa3d6a05d force buf@1.25.0 (#23752) 2023-10-20 14:00:43 +02:00
Ben Ash
341aaef5c9 Update OpenShift docs for vso-0.3.3 (#23737) 2023-10-19 15:43:34 -04:00
Steven Clark
d0501db90f Forbid setting auto_rotate_period on transit managed keys (#23723)
* Forbid setting auto_rotate_period on transit managed keys

 - Prevent and guard against auto-rotating managed keys as we
   generate an invalid key version without the uuid field set.
 - Hook in the datakey generation api into managed key encryption.

* Add cl
2023-10-19 15:29:01 -04:00
Steven Clark
479520c474 Specify within ACME client counting what are the certificate identifiers (#23738) 2023-10-19 15:00:36 -04:00
Max Coulombe
f14e82626a + added clean function stub so it can be used in Vault ENT (#23735) 2023-10-19 11:07:41 -04:00
Chelsea Shaw
07d72c842e UI: OpenAPI test coverage (#23583) 2023-10-19 09:59:12 -05:00
Violet Hynes
146653dfef VAULT-20487 update build failure slack output (#23724)
* VAULT-20487 update build failure slack output

* VAULT-20487 add new needs

* VAULT-20487 make it run on my branch

* VAULT-20487 make it run

* VAULT-20487 finalize?
2023-10-19 08:56:35 -04:00
Brian Scholer
a0a150b7f1 Update step-down.mdx to describe behavior against non-active nodes (#23657)
* Update step-down.mdx to describe behavior against non-active nodes

Behavior changed in Vault 1.9:
https://developer.hashicorp.com/vault/docs/v1.9.x/commands/operator/step-down
2023-10-18 19:33:46 -07:00
johncooler
b74bb26310 Update install.mdx (#23693)
fix typo
2023-10-18 19:17:31 -07:00
Chelsea Shaw
199c04f612 Add banner for when resultant-acl check fails (#23503) 2023-10-18 21:51:36 +00:00
Jordan Reimer
a31b029cf5 Dashboard TLS Configuration Details Bug (#23726)
* fixes issues displaying accurate tls state in dashboard configuration details

* adds changelog entry

* updates tls getter to look for falsy in configuration details card
2023-10-18 15:47:54 -06:00