Commit Graph

20484 Commits

Author SHA1 Message Date
claire bontempo
de87c7f3c0 add isPatchAllowed to jsdoc (#28260) 2024-09-03 14:48:36 -05:00
claire bontempo
3a9db72792 UI: improve control group UX (#28232)
* wip control group fix?

* dont rely on models for capabilities;

* Revert "wip control group fix?"

This reverts commit cf3e896ba05d2fdfe1f6287bba5c862df4e5d553.

* make explicit request for data

* remove dangerous triple curlies

* cleanup template logic and reuse each-in

* remove capability checks from model

* update tests to reflect new behavior

* add test coverage

* fix mirage factory, update details tests

* test control groups VAULT-29471

* finish patch test

* alphabetize!

* does await help?

* fix factory

* add conditionals for control group error
2024-09-03 10:49:41 -07:00
miagilepner
ff7309573f VAULT-27398: (TOB) remove / prefixes in sanitizePath (#28255) 2024-09-03 17:43:46 +02:00
Chelsea Shaw
5f2cedb4b9 UI: update expected OpenAPI attrs for test (#28242)
* update expected OpenAPI attrs

* Add key-usage field to form

* undo add to page

---------

Co-authored-by: claire bontempo <68122737+hellobontempo@users.noreply.github.com>
2024-09-03 09:45:32 -05:00
Peter Wilson
a7026acef9 remove multierror package - from entry formatter (#28253) 2024-09-03 12:00:15 +01:00
Meggie
aea2151dc3 Adding known issue writeup for audit log bug (#28247)
* Create 1_17_audit-log-hmac.mdx

* add to 1.17 notes

* add to 1.16 upgrade notes
2024-08-30 21:57:20 -04:00
Tony Wittinger
fcd6ef2731 Update CHANGELOG.md (#28246) 2024-08-31 01:25:53 +00:00
Chelsea Shaw
11fc622c4b Correctly check for top ns == root (#28241) 2024-08-30 15:26:35 -05:00
davidadeleon
259b3ac9ec VAULT-29658: Docs update for AOP (#28238)
* docs change

* Update website/content/docs/concepts/adaptive-overload-protection/index.mdx

Co-authored-by: Paul Banks <pbanks@hashicorp.com>

* Update website/content/docs/concepts/adaptive-overload-protection/index.mdx

Co-authored-by: Paul Banks <pbanks@hashicorp.com>

* Update website/content/docs/concepts/adaptive-overload-protection/index.mdx

Co-authored-by: Paul Banks <pbanks@hashicorp.com>

* adjust some replication verbiage

---------

Co-authored-by: Paul Banks <pbanks@hashicorp.com>
2024-08-30 16:08:24 -04:00
Chris Capurso
5b79c078c3 Activity Export API doc updates (#28172)
* remove export from restricted endpoints

* enhance activity export JSON examples

* fix nulls

* add missing local_entity_alias fields

* add JSON and CSV response examples

* Simplify namespace filtering concept

Co-authored-by: Violet Hynes <violet.hynes@hashicorp.com>

---------

Co-authored-by: Violet Hynes <violet.hynes@hashicorp.com>
2024-08-30 14:43:17 -04:00
akshya96
06fac16a1e Add maximum request duration (timeouts) for all requests except actual monitor and events requests (#28230)
* fix paths for sys/monitor and sys/events

* add changelog

* add changelog

* Update http/handler.go

Co-authored-by: Violet Hynes <violet.hynes@hashicorp.com>

* added some modifications to check for timeout

---------

Co-authored-by: Violet Hynes <violet.hynes@hashicorp.com>
2024-08-30 11:00:12 -07:00
divyaac
8e1db67f6f Added some documentation (#28225)
* Added some documentation

* Fix typo
2024-08-30 10:08:03 -07:00
Kit Haines
edf6851eb4 Key Usage Enablement for Ent-Feature CMPv2 (#28237)
* Key Usage Enablement for Ent-Feature CMPv2
2024-08-30 17:05:20 +00:00
JMGoldsmith
9ba5437ab5 adding some code (#28236) 2024-08-30 17:19:25 +01:00
Paul Banks
bb5f658c57 Allow explicit metric registration. Fixes #11732 (#27966)
* Register ha timing metrics. Fixes #11732

* Add CHANGELOG

* Fix copywrite headers

* Relicence SDK files after move

* Update vault/ha.go
2024-08-30 14:54:57 +00:00
Adam Rowan
cef5fce1e2 Update interoperability-matrix.mdx (#28231)
Small update to include new Private Machines HSM integration with Vault
2024-08-30 10:36:01 -04:00
Violet Hynes
bc7923ad29 VAULT-30219 Bug fix for race condition (#28228) 2024-08-30 09:45:58 -04:00
miagilepner
b5621aa368 VAULT-28477 Bootstrap and persist autopilot versions (#28186)
* add versions to raft bootstrap answer

* remove version faking

* save version state to storage

* logging and copy

* changelog

* use leader versions on upgrade

* add enterprise cluster test

* never drop persisted states

* rename to partialCopy, fix comment, fix log line
2024-08-30 08:32:26 +00:00
claire bontempo
f634808ed4 UI: Implement KV patch+subkey [enterprise] (#28212)
* UI: Implement overview page for KV v2 (#28162)

* build json editor patch form

* finish patch component and tests

* add tab to each route

* and path route

* add overview tab to tests

* update overview to use updated_time instead of created_time

* redirect relevant secret.details to secret.index

* compute secretState in component instead of pass as arg

* add capabilities service

* add error handling to fetchSubkeys adapter request

* add overview tabs to test

* add subtext to overview card

* remaining redirects in secret edit

* remove create new version from popup menu

* fix breadcrumbs for overview

* separate adding capabilities service

* add service to kv engine

* Revert "separate adding capabilities service"

This reverts commit bb70b12ab7dbcde0fbd2d4d81768e5c8b1c420cc.

* Revert "add service to kv engine"

This reverts commit bfa880535ef7d529d7610936b2c1aae55673d23f.

* update navigation test

* consistently navigate to secret.index route to be explicit

* finish overview navigation tests

* add copyright header

* update delete tests

* fix nav testrs

* cleanup secret edit redirects

* remove redundant async/awaits

* fix create test

* edge case tests

* secret acceptance tests

* final component tests

* rename kvSecretDetails external route to kvSecretOverview

* add comment

* UI: Add patch route and implement Page::Secret::Patch page component (sidebranch) (#28192)

* add tab to each route

* and path route

* add overview tab to tests

* update overview to use updated_time instead of created_time

* redirect relevant secret.details to secret.index

* compute secretState in component instead of pass as arg

* add capabilities service

* add error handling to fetchSubkeys adapter request

* add patch route and put in page component

* add patch secret action to subkeys card

* fix component name

* add patch capability

* alphabetize computed capabilities

* update links, cleanup selectors

* fix more merge conflict stuff

* add capabilities test

* add models to patch link

* add test for patch route

* rename external route

* add error templates

* make notes about enterprise tests, filter one

* remove errors, transition (redirect) instead

* redirect patch routes

* UI: Move fetching secret data to child route (#28198)

* remove @secret from metadata details

* use metadata model instead of secret in paths page

* put delete back into kv/data adapter

* grant access in control group test

* update metadata route and permissions

* remove secret from parent route, only fetch in details route

* change more permissions to route perms, add tests

* revert overview redirect from list view

* wrap model in conditional for perms

* remove redundant canReadCustomMetadata check

* rename adapter method

* handle overview 404

* remove comment

* add customMetadata as an arg

* update grantAccess in test

* make version param easier to follow

* VAULT-30494 handle 404 jira

* refactor capabilities to return an object

* update create tests

* add test for default truthy capabilities

* remove destroy-all-versions from kv/data adapter

* UI: Add enterprise checks (#28215)

* add enterprise check for subkey card

* add max height and scroll to subkey card

* only fetch subkeys if enterprise

* remove check in overview

* add test

* Update ui/tests/integration/components/kv/page/kv-page-overview-test.js

* fix test failures (#28222)

* add assertion

* add optional chaining

* create/delete versioned secret in each module

* wait for transition

* add another waitUntil

* UI: Add patch latest version to toolbar (#28223)

* add patch latest version action to toolbar

* make isPatchAllowed arg all encompassing

* no longer need model check

* use hash so both promises fire at the same time

* add subkeys to policy

* Update ui/lib/kv/addon/routes/secret.js

* add changelog

* small cleanup items! (#28229)

* add conditional for enterprise checking tabs

* cleanup fetchMultiplePaths method

* add test

* remove todo comment, ticket created and design wants to hold off

* keep transition, update comments

* cleanup tests, add index to breadcrumbs

* add some test coverage

* toggle so value is readable
2024-08-29 16:38:39 -07:00
Chelsea Shaw
4de1c697a2 UI: fix DB Postgres test (#28227) 2024-08-29 16:26:16 -05:00
vinay-gopalan
b6015de314 add oss check on tests (#28226) 2024-08-29 20:05:54 +00:00
Luciano Di Lalla
1ab4ed0da3 Update CHANGELOG.md for 1.17.4 1.16.8 and 1.15.14 (#28224) 2024-08-29 15:05:54 -04:00
Angel Garbarino
3abca46464 WIF sidebranch (#28148)
* manual cherry pick to deal with all the merge things

* changelog

* test fixes

* Update 28148.txt

* fix tests failures after main merge

* fix test failures after main merge

* Add Access Type and conditionally render WIF fields (#28149)

* initial work.

* remove access_type

* better no model logic well kind of

* rollback attrs

* remove defaults

* stopping point

* wip changing back to sidebranch

* hustling shuffling and serializing

* some of the component test coverage

* disable acces type if editing

* test coverage

* hide max retries that sneaky bugger

* cleanup

* cleanup

* Update root-config.js

* remove flash message check, locally passes great but on ci flaky

* clean up

* thank you chelsea

* test clean up per enterprise vs community

* address pr comments

* welp a miss add

* UI (sidebranch) WIF Issuer field (#28187)

* Add type declaration files for aws config models

* use updated task syntax for save method on configure-aws

* fix types on edit route

* fetch issuer on configure edit page if aws + enterprise

* track issuer within configure-aws component

* add placeholder support on form-field

* Add warning if issuer changed from previous value or could not be read

* cleanup

* preliminary tests

* dont use while loop so we can test the modal

* tests

* cleanup

* fix tests

* remove extra tracked value and duplicate changed attrs check

* modal footer

---------

Co-authored-by: Angel Garbarino <argarbarino@gmail.com>

* Display issuer on Configuration details (#28209)

* display issuer on configuration details

* workflow complete, now on to testing

* handle issuer things

* fix all the broken tests things

* add test coveragE:

* cleanup

* rename model/adapter

* Update configure-aws.ts

* Update aws-configuration-test.js

* 90 percent there for pr comments

* last one for tonight

* a few more because why not

* hasDirtyAttributes fixes

* revert back to previous noRead->queryIssuerError

---------

Co-authored-by: Chelsea Shaw <82459713+hashishaw@users.noreply.github.com>
2024-08-29 12:17:51 -06:00
vinay-gopalan
ec9b675f70 Add OSS stub functions for Self-Managed Static Roles (#28199) 2024-08-29 10:01:01 -07:00
Ryan Cragun
78e1cceccc ubi: fix HasLicense Redhat requirement (#28216)
Signed-off-by: Ryan Cragun <me@ryan.ec>
2024-08-29 09:14:09 -06:00
Paul Banks
e962605055 Bump raft to 1.7.1 to include pre-vote fixes (#28218) 2024-08-29 14:20:51 +00:00
Violet Hynes
a5262e08bb VAULT-30219 CE changes for versioned secret fix (#28207)
* VAULT-30219 CE changes for versioned secret fix

* Changelog
2024-08-28 11:29:06 -04:00
Chelsea Shaw
872f31fa1d UI: remove renew self call after login (#28204)
* check for renewAfterEpoch before comparing it

* add test coverage for regression

* add comment. Fixes VAULT-4630

* throw error

* add changelog
2024-08-28 10:05:29 -05:00
Chris Capurso
de0c724d72 handle mount fields for non-entity clients; prevent null values (#28202) 2024-08-28 09:49:03 -04:00
Scott Miller
747b395da5 Revocation RevokerFactory interface, CE changes (#28203) 2024-08-27 21:35:11 +00:00
Ryan Cragun
ba3d9c9aa0 docs: update Docker curl upgrade guide (#28158)
Signed-off-by: Ryan Cragun <me@ryan.ec>
2024-08-27 11:16:32 -06:00
Andrew Talbot
489cf35208 Docs (lambda-extension): add warning about caching re. distributed tracing headers (#28118)
* add warning about usage of distributed tracing headers in cacheable requests;

* Update lambda-extension.mdx

Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>

---------

Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>
Co-authored-by: Yoko Hyakuna <yoko@hashicorp.com>
2024-08-27 10:15:50 -07:00
claire bontempo
c8c783c2a2 return inject back to flag service (#28197) 2024-08-27 15:54:05 +00:00
Yoko Hyakuna
454d639916 Add the instruction for tuning the lease TTL (#28193)
* Add the instruction for tuning the lease TTL

* Fix a typo

* Add the help command
2024-08-27 08:07:38 -07:00
Ken Keller
19eaf0282a adding consul 2 raft storage migration (#28143)
* initial commit

* fix urls

* update location of guide

* update names

* update names

* Update website/content/docs/platform/k8s/consul-to-raft.mdx

Co-authored-by: Yoko Hyakuna <yoko@hashicorp.com>

* Update website/content/docs/platform/k8s/consul-to-raft.mdx

Co-authored-by: Yoko Hyakuna <yoko@hashicorp.com>

* Update website/content/docs/platform/k8s/consul-to-raft.mdx

Co-authored-by: Yoko Hyakuna <yoko@hashicorp.com>

* Update website/content/docs/platform/k8s/consul-to-raft.mdx

Co-authored-by: Yoko Hyakuna <yoko@hashicorp.com>

* Update website/content/docs/platform/k8s/consul-to-raft.mdx

Co-authored-by: Yoko Hyakuna <yoko@hashicorp.com>

* Apply suggestions from code review

Co-authored-by: Yoko Hyakuna <yoko@hashicorp.com>

* fix change to package-lock

* Apply suggestions from code review

yoko's suggestions

Co-authored-by: Yoko Hyakuna <yoko@hashicorp.com>

---------

Co-authored-by: Yoko Hyakuna <yoko@hashicorp.com>
2024-08-27 09:57:04 -05:00
claire bontempo
09c92b89cc UI: Add capabilities service (#28168)
* add capabilities service

* remove from kv engine for now

* add canRead

* move await helper to addon

* add test

* update capabilities service to accommodate multiple paths

* address comments, make methods more explicit

* remove namespace key

* fix typo in test

* add namespace back!

* round out tests for other methods

* add test

* add comment
2024-08-23 16:17:19 -07:00
Chelsea Shaw
111d6a83ea adds back chrome version pin (#28176) 2024-08-23 16:21:58 -05:00
Ryan Cragun
f6df23c7cf enos: install go toolchain on lint (#28182)
Signed-off-by: Ryan Cragun <me@ryan.ec>
2024-08-23 14:23:47 -06:00
Chelsea Shaw
1d93668733 UI: remove flaky title assertion (#28179) 2024-08-23 14:53:10 -05:00
Ryan Cragun
b5d32b7bec enos: add shfmt formatting to enos module scripts (#28142)
Signed-off-by: Ryan Cragun <me@ryan.ec>
2024-08-23 13:45:30 -06:00
Ryan Cragun
438fae0952 ui: rebuild fontconfig cache on Github hosted runners (#28177)
It appears that with the latest runner image[0] that we occasionally see
a flaky test with an error related to our fontconfig cache:

```
Error: Browser timeout exceeded: 10s
Error while executing test: Acceptance | wrapped_token query param functionality: it authenticates when used with the with=token query param
Stderr:
 Fontconfig error: No writable cache directories
[0822/180212.113587:WARNING:sandbox_linux.cc(430)] InitializeSandbox() called with multiple threads in process gpu-process.
```

This change rebuilds the fontconfig cache on Github hosted runners.
Hopefully we can remove this at some point when a new runner image is
released.

[0] https://github.com/actions/runner-images/releases/tag/ubuntu22%2F20240818.1

Signed-off-by: Ryan Cragun <me@ryan.ec>
2024-08-23 19:23:28 +00:00
Chelsea Shaw
254b71d4e2 UI: update cc overview test (#28174)
* make overview test robust against generated data

* cleaner
2024-08-23 16:56:26 +00:00
Chris Capurso
af09904115 Rename activity export API identity fields (#28173)
* rename entity-related export fields

* fix tests
2024-08-23 11:17:27 -04:00
claire bontempo
8699e3928e UI: kv v2 test updates (#28169)
* make breadcrumb assertion easier to read

* add assertion messages to strictEqual url checks

* change assert.ok to asser.true
2024-08-23 09:06:17 -06:00
Steven Clark
5d4ea2f4fa Add retry logic to building zlint test container (#28167)
- Sometimes we are failing to pull the zlint tagged version from
   GitHub when building up the test containers. Add a simple retry
   around the container building step to see if this resolves the
   issue.
2024-08-23 08:33:21 -04:00
Ellie
6558df47b4 Check if storage should be updated during invalidation (#28059)
* check if storage should be updated during invalidation

* add changelog

* add other tests and fix for auth move

* fix changelog

* fix comment

* remove ent tests

---------

Co-authored-by: davidadeleon <56207066+davidadeleon@users.noreply.github.com>
2024-08-22 17:00:55 -04:00
Chelsea Shaw
1488f0956d UI: remove pinned chrome version (#28159) 2024-08-22 20:47:57 +00:00
Rachel Culpepper
c986b400e2 update go version (#28160) 2024-08-22 15:29:26 -05:00
Scott Miller
641e12d3bf Document seal_name parameter to entropy (#28123)
* Document seal_name parameter to entropy

* dashes

* active voice

* Update website/content/docs/configuration/entropy-augmentation.mdx

Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>

---------

Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>
2024-08-22 20:15:15 +00:00
Tim McMahon
bb034b87df Update seal.mdx (#28133)
Typo

Co-authored-by: divyaac <divya.chandrasekaran@hashicorp.com>
2024-08-22 13:10:14 -07:00