Commit Graph

20484 Commits

Author SHA1 Message Date
gerardma77
17664bcfbe Adding AD lifetime period of an old password note to Vault LDAP secrets Engine API Documentation (#28429)
* adding_OldPasswordAllowedPeriod_waring

* Updated note for AD password

* Update website/content/api-docs/secret/ldap.mdx

Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>

---------

Co-authored-by: Equus quagga <jan.prinsloo@hashicorp.com>
Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>
2024-09-19 12:08:32 -07:00
gerardma77
2e6944d93e Adding AD lifetime period of an old password note to Vault LDAP secrets Engine Documentation. (#28428)
* adding_OldPasswordAllowedPeriod_waring

* Updated note for AD passwords

* Update website/content/docs/secrets/ldap.mdx

Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>

---------

Co-authored-by: Equus quagga <jan.prinsloo@hashicorp.com>
Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>
2024-09-19 11:44:00 -07:00
Sarah Chavis
343cc88e03 Update index.mdx (#28436)
Fix list typo
2024-09-18 16:27:45 -07:00
Tony Wittinger
20b48f6963 Update CHANGELOG.md (#28435)
* Update CHANGELOG.md

* Update CHANGELOG.md
2024-09-18 22:38:14 +00:00
Jonathan Frappier
66fa7606ac Add set up vault service doc (#28272)
* Add set up vault service doc
* Suggestions/edits (#28394)
---------

Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>
2024-09-18 11:12:06 -07:00
Violet Hynes
3df04b8aae Update LTS language to not contradict (#28424) 2024-09-18 13:37:48 -04:00
Ryan Cragun
b977fac936 VAULT-30819: DR replicatio: wait for seal rewrap before enabling DR (#28425)
Ensure that both clusters have completed their seal rewrap before
enabling DR on the secondary. We don't want the secondary to come back
up in an in-between state.

Signed-off-by: Ryan Cragun <me@ryan.ec>
2024-09-18 10:29:03 -06:00
Violet Hynes
fdc871370d Update Okta SDK to latest minor version (#28407) 2024-09-17 16:12:23 -04:00
Chelsea Shaw
a9e6704267 UI: Handle some deprecations (#28276)
* don't update the passed object directly
fixes deprecation https://deprecations.emberjs.com/id/setting-on-hash

* replace hasRecordForId with peekRecord -- ember-data:deprecate-has-record-for-id

* fix deprecation ember-data:deprecate-has-record-for-id

* update deprecation workflow
2024-09-17 14:59:01 -05:00
Chris Capurso
75bea5c05a add end-to-end test for audit HMACing (#28415)
* add end-to-end test for audit HMACing

* fix some comments

* add clarification for entry count assertion

* more comment clarity

* use const for hmac prefix

* add check for disabling audit device
2024-09-17 15:50:03 -04:00
Violet Hynes
e17fc06824 Add note about vault kv get to Proxy docs (#28400) 2024-09-17 15:22:34 -04:00
Violet Hynes
450506ba9c Fix link to mongodb atlas page (#28403)
* Fix link to mongodb atlas page

* Fix missing space
2024-09-17 15:22:06 -04:00
Ryan Cragun
1082629d1f VAULT-30819: Fix two potential flakes in DR replication (#28409)
Fix two occasional flakes in the DR replication scenario:
* Always verify that all nodes in the cluster are unsealed before
  verifying test data. Previously we only verified seal status on
  followers.
* Fix an occasional timeout when waiting for the cluster to unseal by
  rewriting the module to retry for a set duration instead of
  exponential backoff.

Signed-off-by: Ryan Cragun <me@ryan.ec>
2024-09-17 12:32:15 -06:00
Kuba Wieczorek
1736addedf Send the UI test results from the CI to DataDog (#28412) 2024-09-17 12:29:04 +01:00
miagilepner
d00715d129 VAULT-28478: Updates to autopilot docs (#28331)
* restructure

* update command

* fixes

* fix command flags

* revert makefile change

* remove tick log
2024-09-17 10:53:18 +02:00
Violet Hynes
c140470639 Fix Vercel error caused by spaces before code snippet (#28408) 2024-09-16 15:54:38 -04:00
hc-github-team-secure-vault-core
7a5d99d316 Update vault-plugin-database-redis to v0.4.0 (#28404)
* Update vault-plugin-database-redis to v0.4.0

* Add changelog

---------

Co-authored-by: hc-github-team-secure-vault-ecosystem <hc-github-team-secure-vault-ecosystem@users.noreply.github.com>
2024-09-16 17:41:35 +00:00
Andrew Talbot
336e0c7f0d docs(lambda-extension): add line to document new revoke token header feature; (#28318) 2024-09-16 13:09:09 -04:00
Robert
d466d7949b Add activation flags cluster note (#28399) 2024-09-16 10:40:03 -05:00
Luis (LT) Carbonell
352bbeb06c VAULT-12732: Add Heap Profiling Option to Vault Server Command Line (#27033)
* Add pprof output option to CLI

* Add to docs

* Add changelog

* Update website/content/docs/commands/server.mdx

Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>

* some changes

* Update changelog/27033.txt

Co-authored-by: Josh Black <raskchanky@gmail.com>

---------

Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>
Co-authored-by: Josh Black <raskchanky@gmail.com>
2024-09-16 11:00:08 -04:00
Raja Nadar
a439428855 Remove 100% dup section for 1.13.6 (#28398)
removed the section
2024-09-16 09:04:56 -04:00
Robert
7112c7be5d Add activation-flags cluster known issue (#28341) 2024-09-13 17:40:31 -05:00
Chelsea Shaw
c7ed13f1a2 UI: Add expected attr to pass tests (#28389)
* Add expected attr to pass tests

* add tidyCmpv2NonceStore to tidy forms
2024-09-13 13:00:57 -07:00
Steven Clark
6cf885f85a Fix key usage changelog entry (#28391)
- Change it from a feature to an improvement.
2024-09-13 13:38:43 -04:00
Chelsea Shaw
1c16994bc3 UI: stabilize replication tests (#28384)
* Add specificity to replication title selectors

* Use specific selectors for replication titles in tests
2024-09-12 14:50:37 -05:00
Ellie
84c58f66bb add warning to identify which entities have 1+ aliases with the same mount accessor (#28054)
* add warning to identity which entities have 1+ aliases with the same mount accessor

* remove redundant log
2024-09-12 14:26:09 -05:00
Rachel Culpepper
978b3aee52 add ce changes and documentation for tidying cmpv2 nonce store (#28362)
* add ce changes and documentation for tidying cmpv2 nonce store

* add build tag

* fix test failures

* fix backend test
2024-09-12 11:32:51 -05:00
kpcraig
d01db33b33 Update release notes and knowns issues for aws auth external id bug (#28129)
* add documentation for external_id bug

* Update website/content/docs/release-notes/1.17.0.mdx

Co-authored-by: Ellie <ellie.sterner@hashicorp.com>

* fix partials include

* Update website/content/partials/known-issues/aws-auth-external-id.mdx

Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>

* Update website/content/partials/known-issues/aws-auth-external-id.mdx

Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>

---------

Co-authored-by: Ellie <ellie.sterner@hashicorp.com>
Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>
2024-09-12 10:31:32 -05:00
JMGoldsmith
cc38383732 VAULT-30694 Adding a check for nil values returned by the queue (#28330)
* adding a check for nil values returned by the queue

* adding changelog

* changing to be more idiomatic

* fixing error message to be a bit more clear

* reverting change to error handling

* Update builtin/logical/aws/path_static_roles.go

Co-authored-by: John-Michael Faircloth <fairclothjm@users.noreply.github.com>

---------

Co-authored-by: John-Michael Faircloth <fairclothjm@users.noreply.github.com>
2024-09-12 17:26:46 +02:00
Scott Miller
f52b984821 Mention the cert forwarding header in cert auth docs (#28377)
* Mention the cert forwarding header in cert auth docs

* Move to own section and fix link
2024-09-12 09:14:22 -05:00
claire bontempo
49b46ead82 UI: Fix enabling replication capabilities bug (#28371)
* add capabilities service to replication engine

* fix capabilities paths in route file

* pass updated capabilities using getters

* add changelog

* fix logic so default is based on undefined capabilities (not no mode)
2024-09-12 08:51:11 -05:00
hc-github-team-secure-vault-core
2b4e99fa75 Update vault-plugin-auth-kubernetes to v0.20.0 (#28289)
* Update vault-plugin-auth-kubernetes to v0.20.0

* Add changelog

---------

Co-authored-by: hc-github-team-secure-vault-ecosystem <hc-github-team-secure-vault-ecosystem@users.noreply.github.com>
2024-09-11 20:19:28 +00:00
hc-github-team-secure-vault-core
28d69301ca Update vault-plugin-secrets-gcpkms to v0.19.0 (#28360)
* Update vault-plugin-secrets-gcpkms to v0.19.0

* Add changelog

---------

Co-authored-by: hc-github-team-secure-vault-ecosystem <hc-github-team-secure-vault-ecosystem@users.noreply.github.com>
2024-09-11 12:52:22 -07:00
Hamza Shili
9b99ac166b Update vault-plugin-auth-gcp to v0.19.0 (#28366)
* Update vault-plugin-auth-gcp to v0.19.0

* Add changelog
2024-09-11 19:09:50 +00:00
Luis (LT) Carbonell
146ad63256 Add build for FIPS ARM Docker images (#28310)
* Add build for FIPS ARM Docker images

* arm64 build
2024-09-11 15:07:34 -04:00
Chelsea Shaw
c68cdaef10 UI: Show filters and hide mount attribution when child clients only (#28357) 2024-09-11 18:56:07 +00:00
hc-github-team-secure-vault-core
2b8d079754 Update vault-plugin-secrets-ad to v0.19.0 (#28361)
---------

Co-authored-by: hc-github-team-secure-vault-ecosystem <hc-github-team-secure-vault-ecosystem@users.noreply.github.com>
2024-09-11 14:11:26 -04:00
Angel Garbarino
10cbd8871e change the error (#28358) 2024-09-11 12:54:05 -05:00
hc-github-team-secure-vault-core
2e4c6ed1ee Update vault-plugin-secrets-mongodbatlas to v0.13.0 (#28348)
* Update vault-plugin-secrets-mongodbatlas to v0.13.0

* Add changelog

---------

Co-authored-by: hc-github-team-secure-vault-ecosystem <hc-github-team-secure-vault-ecosystem@users.noreply.github.com>
2024-09-11 12:36:37 -05:00
Scott Miller
cda20e39b1 Ferry ocsp_ca_certificates over the OCSP ValidationConf (#28309)
* Ferry ocsp_ca_certificates over the OCSP ValidationConf

* changelog

* First check issuer, then check extraCAS

* Use the correct cert when the signature validation from issuer succeeds

* Validate via extraCas in the cert missing case as well

* dedupe logic

* remove CA test
2024-09-11 09:57:27 -05:00
Chelsea Shaw
daab76c6e6 fix chroot nav tests (#28353) 2024-09-11 09:49:04 -05:00
Chelsea Shaw
e1c56a300f UI: reorg replication (#28332)
* Add replication-overview-mode component + tests

* Move both primary view higher to template

* simplify replication-summary component

* remove replication-mode-summary

* Add jsdocs to replication-overview-mode

* fix overview-mode test

* fix page/mode-index test

* copyright

* address PR comments

* note to devs
2024-09-11 09:19:33 -05:00
Chelsea Shaw
abdeda43ca UI: hide client count nav link when chrooted listener (#28346) 2024-09-11 08:29:33 -05:00
Chelsea Shaw
855743fef0 UI: Fix sanitization and add tests (#28347) 2024-09-11 08:29:19 -05:00
hc-github-team-secure-vault-core
ef43f03f4d Update vault-plugin-auth-jwt to v0.22.0 (#28349)
* Update vault-plugin-auth-jwt to v0.22.0

* Add changelog

---------

Co-authored-by: hc-github-team-secure-vault-ecosystem <hc-github-team-secure-vault-ecosystem@users.noreply.github.com>
2024-09-11 00:07:53 -05:00
Steven Clark
4a1cddf2d5 Update the backport assistant release versions adding 1.18.x (#28344) 2024-09-10 20:44:17 +00:00
Steven Clark
10df48b3e1 Remove beta tags from CMPv2 docs (#28339) 2024-09-10 16:18:38 -04:00
Victor Rodriguez
062f1dd35d Set version for the release branch to 1.19.0-beta1. (#28343) 2024-09-10 19:55:31 +00:00
Victor Rodriguez
28ca1ef7e1 Update API to v0.15.0 and SKD to v0.14.0. (#28340) 2024-09-10 18:50:48 +00:00
Victor Rodriguez
ab8bc34c53 update vault auth submodules to api/v1.15.0 (#28338) 2024-09-10 18:03:47 +00:00