Commit Graph

18967 Commits

Author SHA1 Message Date
Angel Garbarino
2f05a362bf Replace PKI test suites custom runCommands with vault tools runCmd (#25226)
* replace runCommand custom for PKI to vault tools runCmd

* remove duplicate policy command
2024-02-05 18:41:36 -07:00
Kianna
edf4caa63f UI: Custom messages acceptance tests (#25081)
* WIP acceptance tess

* More acceptance tests!

* Update acceptance tests to use general and message selectors

* Fix tests

* Add more tests

* Add multiple message modal test

* Fix failing test

* Add preview tests!

* Fix tests
2024-02-05 15:34:28 -08:00
Christopher Swenson
8f6dfaaf67 Interface for event subscription plugins; SQS plugin (#24352)
Initial version of an internal plugin interface for event subscription plugins,
and an AWS SQS plugin as an example.

Co-authored-by: Tom Proctor <tomhjp@users.noreply.github.com>
2024-02-05 13:17:07 -08:00
Jordan Reimer
84bba4e3b7 Sync Destination Edit Bug (#25222)
* fixes issue with editing sync destination and credentials being overwrittern with masked placeholder value

* addresses pr feedback
2024-02-05 14:10:57 -07:00
Violet Hynes
c1875ecf24 VAULT-20086 Handle potential panic (#25220)
* VAULT-20086 Handle potential panic

* VAULT-20086 typo
2024-02-05 16:08:28 -05:00
hc-github-team-secure-vault-core
54f64631c7 Update vault-plugin-secrets-gcp to v0.18.0 (#25173)
* Automated dependency upgrades

---------

Co-authored-by: hc-github-team-secure-vault-ecosystem <hc-github-team-secure-vault-ecosystem@users.noreply.github.com>
Co-authored-by: Kyle Schochenmaier <kschoche@gmail.com>
2024-02-05 14:08:37 -06:00
Scott Miller
dd1d0f31a2 Only warn if failing to persist encryption counts due to timeout (#25224) 2024-02-05 13:53:45 -06:00
claire bontempo
c0954e51cd ListView empty states (#25221) 2024-02-05 11:30:40 -08:00
Chelsea Shaw
588a43cadb UI: k8s auth openapi update (#25218) 2024-02-05 13:29:57 -06:00
Christopher Swenson
55d2dfb3d0 database: Emit event notifications (#24718)
Including for failures to write credentials and failure to rotate.
2024-02-05 10:30:00 -08:00
Kianna
47024f060c UI: Fix bugs in custom messages (#25169)
* Fix bugs in custom messages

* Add new line split helper file

* Fix multiple banner issue

* Code cleanup

* Add tests

* Add more tests

* Remove empty state action

* Remove test
2024-02-05 09:08:10 -08:00
hc-github-team-secure-vault-core
ebd115f9a1 Update vault-plugin-auth-alicloud to v0.17.0 (#25217)
---------

Co-authored-by: hc-github-team-secure-vault-ecosystem <hc-github-team-secure-vault-ecosystem@users.noreply.github.com>
2024-02-05 16:37:22 +00:00
Scott Miller
1bf1ea212c Avoid map iteration induced flakiness in seal wrapper key searching (#25216) 2024-02-05 09:59:58 -06:00
claire bontempo
79ed357954 UI: Make empty state links consistent (#25209)
* round one of updating empty state actions

* second round of empty states

* update tests

* add changelog
2024-02-02 16:56:53 -08:00
Jordan Reimer
eb08f7605b Sync Acceptance Tests (#25208)
* adds acceptance tests for sync

* adds enterprise to sync acceptance test module names
2024-02-02 23:30:54 +00:00
Milena Zlaticanin
c37bb96e23 Update vault-plugin-auth-kubernetes to v0.18.0 (#25207)
* Update vault-plugin-auth-kubernetes to v0.18.0

* add changelog
2024-02-02 14:44:59 -07:00
hc-github-team-secure-vault-core
51c4f7c61b Update vault-plugin-secrets-azure to v0.17.0 (#25189) 2024-02-02 15:35:42 -05:00
hc-github-team-secure-vault-core
011a4b2b0d Update vault-plugin-auth-cf to v0.16.0 (#25196) 2024-02-02 15:35:22 -05:00
Robert
2647a18b86 Add experiment flag for import (#25205) 2024-02-02 14:18:43 -06:00
hc-github-team-secure-vault-core
1597f42f0f Update vault-plugin-secrets-kubernetes to v0.7.0 (#25204) 2024-02-02 19:05:47 +00:00
Ryan Cragun
e28da4ce5d [QT-669] Automatically synchronize git hooks on make invocation (#25197)
Git doesn’t allow hooks to be in-repo which prevents branch specific hooks.
To get around this we’ve historically copied our hooks from .hooks into
.git/hooks when running make prep in vault and vault-enterprise.

That sort of works but has the following issues:
  * If you hooks call into files in-repo and they are modified between branches
you have to re-sync to resolve it
  * Remembering to sync the hooks is cumbersome

We can’t exactly get around the first issue. It’s always possible that if
you change branches and don’t update your hooks you could run into this
problem if you try to commit without updating them. But we can make it less
likely to fail by:

  * Always syncing the hooks whenever make is called
  * Updating the files in the hooks on all maintained branches to be consistent

Signed-off-by: Ryan Cragun <me@ryan.ec>
2024-02-02 11:38:01 -07:00
Jordan Reimer
8a81b7dc86 Secrets Sync Demo Feedback (#25186)
* clears secret path after successful sync submission

* adds refresh list button to destination secrets view
2024-02-02 08:56:41 -07:00
aphorise
6d59868fb8 Docs: Tranform secrets encode parameter: expiration added. (#25168)
* Docs: Tranform secrets encode parameter:  added.

* Docs: Tranform secrets encode parameter `expiration` text corrected & formating on `ttl` too.

* Docs: Tranform secrets encode parameter `expiration` formating & correction.

* Update website/content/api-docs/secret/transform.mdx
2024-02-02 10:20:10 -05:00
Tom Proctor
d8f32855d2 Make plugin-specific env take precedence over sys env (#25128)
* Make plugin-specific env take precedence over sys env
* Expand the existing plugin env integration test

---------

Co-authored-by: Austin Gebauer <34121980+austingebauer@users.noreply.github.com>
2024-02-02 11:20:32 +00:00
hc-github-team-secure-vault-core
78b317d1d4 Update vault-plugin-secrets-ad to v0.17.0 (#25187)
* Automated dependency upgrades

* Add changelog

---------

Co-authored-by: hc-github-team-secure-vault-ecosystem <hc-github-team-secure-vault-ecosystem@users.noreply.github.com>
2024-02-01 17:14:32 -05:00
claire bontempo
167278bfc9 hardcode selectChoose because selecting 0 index item is unreliable (#25179) 2024-02-01 12:53:30 -08:00
claire bontempo
c9d0bd2c19 Secrets Sync UI: Hide sync client data and add beta tags to feature work (#25170)
* hide sync billing related details

* add beta tags

* add csv comments

* remaining tests

* a couple more tests!
2024-02-01 12:42:58 -08:00
Scott Miller
9d86e5e111 Should be a pointer to ToggleableWrapper, so we don't get a fresh mutex each time (#25180) 2024-02-01 20:38:20 +00:00
Scott Miller
1473dace75 Seal HA Improvements, CE side (#25171)
* add fully_wrapped to seal-backend-status, try to find in-common seals in all cases

* changelog
2024-02-01 14:09:40 -06:00
Thy Ton
aab72100fb add new config option use_annotations_as_alias_metadata for k8s auth on api docs (#24941) 2024-02-01 11:45:53 -08:00
Jakob Beckmann
2a566f40fc docs(kubernetes-auth): add API documentation for kubernetes auth namespace selectors (#19318)
Co-authored-by: Thy Ton <maithytonn@gmail.com>
2024-02-01 11:41:07 -08:00
Angel Garbarino
a4c8ce62fc Bug fix: Update KV data when you change the version of a nested secret (#25152)
* wip need to address testing but want to test something quick on 1.13

* add test coverage

* changelog

* update test comment

* rename getter

* Update kv-data-fields.hbs

revert accidental next step

* linting things
2024-02-01 12:24:21 -07:00
Mike Palmiotto
d75b5ed912 Initialize license in command_testonly for enterprise (#25175) 2024-02-01 19:03:29 +00:00
Mário Queiroz
347345ac11 Fix typo in count.mdx (#25162) 2024-02-01 13:01:26 -05:00
Jordan Reimer
947a00ccb3 Secrets Sync Client Count Updates (#24752)
* Client Count Routing Updates (#24733)

* updates client count routing for sync and future additions

* adds copyright header to clients sync template

* adds missing copyright headers

* UI: Adds secret_syncs to mirage /activity endpoint (#24846)

* add secret_syncs to mirage endpoint

* import clients handler

* UI: Set up client charts for incoming sync data (#24852)

* sum stacked bar values for tooltip total

* make tooltip dynamic based on chartLegend

* remove redundant helper

* add secret_syncs to client count utils

* move sum function to helper

* update horizontal bar chart to include sync_clients

* calculate sum of bars in tooltip

* rename color palette const, define chart legends in each parent component instead of token.js

* update tooltips

* update mirage handler to add sys/ namespace

* update mirage handler to add sys/ namespace

* use pushObject

* update test

* UI: Secret sync bar chart (#24926)

* install lineal

* add ember-style-modifier dep

* Add client count types for serialized data

* Add sync bar chart component with tests

* Chart is responsive

* address comments

* Clients Counts Parent Route (#24899)

* adds interfaces for clients models

* moves date formatting logic from clients activity adapter to utils file

* adds clients counts route

* updates links to clients route to point to top level and updates redirect to counts overview route

* removes clients base route and moves overview and sync routes under counts

* adds clients counts page component

* converts clients route to ts

* adds billing start timestamp to clients config mirage response and updates counts route to always attempt to fetch activity

* fixes issue with updating namespace and auth mount query params always triggering client counts route model hook

* adds tests for clients counts page component

* adds missing copyright header to client-counts type file

* Update ui/app/components/clients/page/counts.hbs

Co-authored-by: claire bontempo <68122737+hellobontempo@users.noreply.github.com>

* fixes bad import in sync-bar-chart

* updates clients counts route to bypass query if there is not start_time

* pins d3-shape to 1.3.7 for now -- makes lineal play nice with old charts

* fixes sync bar chart tooltip assertion

---------

Co-authored-by: claire bontempo <68122737+hellobontempo@users.noreply.github.com>

* UI: convert line-chart to lineal (#24961)

* lineal chart alongside svg

* Add version-history to sync handler for testing

* line chart is TS, test updated

* remove d3-shape resolution

* fix clients/token-test

* use chartHeight in running-total template

* use M/yy key instead of timestamp, chart is responsive

* Add test for swapping datasets

* add more edge case tests

* more test

* remove untrue assertion

* fix weird decimal when between 1.1k and 2k

* address feedback

* Update line-chart to use timestamp instead of month key

* Add timestamp to all places where month is on the clients activity response

* Client Counts Overview (#24969)

* adds counts base component for use in client counts child routes

* adds clients counts overview page component

* splits out monthly new chart from clients running total component

* adds missing copyright headers

* moves running total related assertions from token to overview acceptance test

* removes new client assertions from running-total test and adds tests for monthly-new component

* updates copy in running-total component

* fixes clients overview tests

* fixes timestamp stub not being restored in monthly-new test

* fixes mfa-login test

* renames counts component to activity

* removes unused selectedAuthMethod arg from running-total component

* adds timestamp back to running-total component

* Secrets sync UI: add sync page component (#24982)

* adds counts base component for use in client counts child routes

* adds clients counts overview page component

* splits out monthly new chart from clients running total component

* adds missing copyright headers

* move sync-bar-chart to charts/ folder

* update types and rename chart

* rename template file

* moves running total related assertions from token to overview acceptance test

* removes new client assertions from running-total test and adds tests for monthly-new component

* updates copy in running-total component

* fixes clients overview tests

* fixes timestamp stub not being restored in monthly-new test

* fixes mfa-login test

* fix 0 values erroring charts

* separate timestamp again

* address merge conflicts

* finish building sync chart component WIP css

* renames counts component to activity

* update import

* revert name to dataKey

* update styling for charts without legends

* use monthly stat chart component for layout

* use monthly chart stats in monthly new

* implement stat wrapper;

* remove extra grid div

* rename component

* fix legend css;

* update test[

* remove arbitrarily setting max

* add single month view

* use stat text

* update line chart tests

* rename line chart

* update tests

---------

Co-authored-by: Jordan Reimer <zofskeez@gmail.com>

* update selectors

* add sync page tests

* Secrets Sync UI: Add secrets syncs to csv export (#25056)

* update mirage and add sync clients to export csv

* fix sync legend label

* remove word

* update copy in modal

* update mirage

* fix attribution tooltip text

* Clients Counts Token Route (#25019)

* renames token route and page component back to dashboard

* adds client counts token route and page component

* updates charts in token page to use ChartContainer component

* adds tests for clients token page component

* restore clients dashboard test

* use var for chart title sync page

* updates clients token page to show usage stats when querying single month

* updates token page clients averages to only include entity and non-entity clients in calculation

* fixes monthly total counts lower than new clients in mirage handler

* fixes token test

---------

Co-authored-by: clairebontempo@gmail.com <clairebontempo@gmail.com>

* Clients Usage Stats/Running Total Updates (#25094)

* updates clients usage counts and running totals

* updates usage stats total copy

* fixes client counts overview tests

* Secrets sync UI: cleanup and consolidation of components (#25090)

* rename authMethod to mountPath

* generalize count template copy

* add todo to delete monthly new component

* rename to tokenTab

* wrap filters in conditional checking for start timestamp

* some users may not have access to /config endpoint

* fix querying when user has no billing date permissions and clicks current billing period

* extend activity component from counts page

* Revert "extend activity component from counts page"

This reverts commit 1d0e85c82faf88c4385a04b1a5841cdde7fd00e0.

* rename to startTimestampISO

* remove timestamp from route and just use activity model responseTimestamp

* fix chart y domain max

* fix typos in usage stat and running totals component

* delete backing class for display only template;

* updates tests

* adds comment for fetching license to get start date for billing

* cleans up unused client counts files (#25157)

* adds changelog

* fix assertion copy

* adds changelog description

* updates enterprise sidebar nav test

---------

Co-authored-by: clairebontempo@gmail.com <clairebontempo@gmail.com>
Co-authored-by: claire bontempo <68122737+hellobontempo@users.noreply.github.com>
Co-authored-by: Chelsea Shaw <82459713+hashishaw@users.noreply.github.com>
2024-02-01 10:01:07 -07:00
divyaac
c60d1ce11a Applied Ent Changes (#25160) 2024-02-01 08:46:20 -08:00
Kit Haines
99c74f5c80 Base Binary Cert and CSR Parse functions. (#24958)
* Base Binary Cert and CSR Parse functions.

* Add otherSANS parsing.

* Notate what doesn't exist on a CSR.

* Fix otherSans call err-checking and add basic-constriants to CSR

* Move BasicConstraint parsing to be optionally set.

* Refactored to use existing ParseBasicConstraintsExtension.

* Add handling for the ChangeSubjectName ext on CSR that is needed for EST

* Remove ChangeSubjectName - it's an attribute, not an extension, and there is no clean way to parse it, so pair down for now.

* Make these public methods, so they can be used in vault.

* Add unit tests for certutil.ParseCertificateToCreationParameters.

Also add unit tests for certutil.ParseCertificateToFields.

* Cleanup TestParseCertificate.

* Add unit tests for certutil.ParseCsrToCreationParameters and ParseCsrToFields.

* Fix return values for  "add_basic_constraints" in certutil.ParseCsrToFields.

Add a test for parsing CSRs where "add_basic_constraints" is false.

* Clear up some todos.

* Add a test for certutil.ParseCertificateToCreationParameters for non-CA cert.

* Tweak TestParseCertificate/full_non_CA_cert.

* Basics of three remaining fields - keyUsage; extKeyUsage; PolicyIdentifiers

* Fix tests and err handling

* Add unit tests for policy_identifiers; ext_key_usage_oids; key_usage

* Add test on ext_key_usage_oids

* Remove duplicate usages elsewhere.

* Add error handling to csr-checks.

* Remove extranames on returned types.

* Remove useless function.

---------

Co-authored-by: Victor Rodriguez <vrizo@hashicorp.com>
2024-02-01 10:03:43 -05:00
Mike Palmiotto
e4a11ae7cd Request Limiter Reload tests (#25126)
This PR introduces a new testonly endpoint for introspecting the
RequestLimiter state. It makes use of the endpoint to verify that changes to
the request_limiter config are honored across reload.

In the future, we may choose to make the sys/internal/request-limiter/status
endpoint available in normal binaries, but this is an expedient way to expose
the status for testing without having to rush the design.

In order to re-use as much of the existing command package utility funcionality
as possible without introducing sprawling code changes, I introduced a new
server_util.go and exported some fields via accessors.

The tests shook out a couple of bugs (including a deadlock and lack of
locking around the core limiterRegistry state).
2024-02-01 09:11:08 -05:00
miagilepner
eb2b905af0 Support adding new stubs to existing stub files (#25130)
* stubmaker can generate stubs for only the missing functions

* check error
2024-02-01 13:40:15 +01:00
Scott Miller
f0e7f114a1 Avoid unnecessary rewraps, CE side (#25144)
* Avoid unnecessary rewraps, CE side

* sealRewrap is only available ENT side

* update stub

* update stub, again
2024-01-31 17:27:52 -06:00
Luciano Di Lalla
9308fa1cb3 Update CHANGELOG.md for 1.15.5, 1.14.9, 1.13.13 (#25148) 2024-01-31 16:04:45 -05:00
Scott Miller
9477062407 Update go-kms-wrapping and related wrappers (#25146) 2024-01-31 18:22:19 +00:00
Austin Gebauer
f2adc60e8e identity/oidc: attempt to fix flakey key rotation test (#25145) 2024-01-31 10:14:54 -08:00
hc-github-team-secure-vault-core
fc0285aada Update vault-plugin-database-snowflake to v0.10.0 (#25143)
* Automated dependency upgrades

* Add changelog

---------

Co-authored-by: hc-github-team-secure-vault-ecosystem <hc-github-team-secure-vault-ecosystem@users.noreply.github.com>
2024-01-31 17:33:54 +00:00
Kianna
effd79b4b9 UI: Clean up dashboard test (#25137)
* Clean up dashboard test

* Move createNS to comamnds helpers

* Address feedback
2024-01-31 09:31:12 -08:00
Paul Banks
1793dc1e79 Install gotestsum as well as check for it (#24992) 2024-01-31 12:04:01 +00:00
Paul Banks
ce942bfee9 Add configurable latency when performing Inmem writes. (#25129) 2024-01-31 11:33:20 +00:00
Kianna
d8df857561 UI: Part two custom messages bug bash (#25082)
* Fix preview button to show form validations

* Show error if there are capability isuses

* Hide create links if user does not have capability

* Update tests and create message

* Focus search input

* Address feedback
2024-01-30 15:27:19 -08:00
Kyle Schochenmaier
8cde951e12 update docs from vso repository (#25133)
Update documentation for VSO api-docs.
2024-01-30 14:08:31 -06:00
Angel Garbarino
1133777c6f Improve test stability (#25120)
* improve overview test

* Add custom waiter to maybe-query-record

* add custom waiter to console/ui-panel

* Add flash message check for better visibility into flakiness

* trying to find what's wrong with PKI

* create role happy path uses root token

* make all policy names on pki workflow unique

* some secret test cleanup, not the main offenders

* remove uncessary settled

* Update kv-run-commands.js

* Update kv-run-commands.js

* Update kv-data-fields-test.js

* some missed fixes that were outside the original cherry pick

* remove overview test things

* move testWaiter to logAndOutput command

* nope not working

---------

Co-authored-by: Chelsea Shaw <cshaw@hashicorp.com>
2024-01-30 12:35:44 -07:00