Commit Graph

19443 Commits

Author SHA1 Message Date
Rachel Culpepper
9ebcbf6a0c vault-24597: add key types and key creation for CMAC (#25967)
* add key types for cmac for transit key creation

* add test for key creation

* fix test logic and add cases

* fix logic for hmac

* add go doc

* fix key size and add check for HMAC key
2024-04-19 09:39:59 -05:00
Peter Wilson
244b4998a0 Update metric labeler for CE/Ent (#26537) 2024-04-19 13:26:15 +00:00
Tom Proctor
86d529e115 Upgrade api package go-jose to v4 (#26527)
* Upgrade api package go-jose to v4
* go-jose/v4 requires go 1.21
2024-04-19 12:17:41 +01:00
Peter Wilson
16cd58d478 Remove unused and redundant call to validate options (#26533) 2024-04-19 09:21:15 +00:00
Peter Wilson
7c9e4f39b6 headers test tweaks (#26532) 2024-04-19 08:34:20 +00:00
Christopher Swenson
1e36019f1c Remove SQS plugin (#26524)
To be moved to Enterprise.

The paths and plugin itself were not activated.
2024-04-18 20:50:11 +00:00
claire bontempo
dd939d9a7e UI: fix undefined csv filename (#26485)
* fix undefined file name start date

* add test coverage!

* small copy changes

* one last test!

* add changelog;
2024-04-18 11:11:23 -07:00
Sarah Chavis
79d9bf1572 [DOCS] Update LTS overview (#26483)
Add image and tighten language around LTS maintenance vs standard maintenance
Replace "support" with "maintenance" in the image alt text
Apply feedback
2024-04-18 13:54:30 -04:00
Christopher Swenson
9643471081 Install tools when doing test-ui builds (#26505) 2024-04-18 17:44:45 +00:00
Peter Wilson
17c6cd1a2e fix race test (#26500) 2024-04-18 17:43:07 +00:00
Scott Miller
fd9e113c82 Use a less strict URL validation for PKI issuing and crl distribution urls (#26477)
* Use a less strict URL validation for PKI issuing and crl distribution urls

* comma handling

* limit to ldap

* remove comma hack

* changelog

* Add unit test validating ldap CRL urls

---------

Co-authored-by: Steve Clark <steven.clark@hashicorp.com>
2024-04-18 17:35:33 +00:00
Steven Clark
3140dbe209 Adapt CI to use new filenames for misspell releases (#26506) 2024-04-18 17:11:07 +00:00
Brian Shumate
5aaa489f80 Docs: migrate key metrics from WAF to telemetry (#26499)
- Add key metrics document to telemetry internals documentation
2024-04-18 11:45:37 -04:00
Violet Hynes
85ed817034 VAULT-20405 chunk decompression to prevent loading full decompressed data into memory at once (#26464)
* VAULT-20405 chunk decompression to prevent loading full decompressed data into memory at once

* Add changelog
2024-04-18 10:13:56 -04:00
Peter Wilson
ade585a1e8 Audit: update enableAudit ordering (#26493)
* update enableAudit ordering

* Fix order of defer read only view
2024-04-18 14:56:35 +01:00
Peter Wilson
fde8ace212 parallelize other tests (#26494) 2024-04-18 13:25:43 +00:00
Peter Wilson
1d2dd323ab NewTestCluster use default audit backends (#26491) 2024-04-18 14:12:04 +02:00
Peter Wilson
4f28753cc4 missed file (#26489) 2024-04-18 09:00:45 +01:00
Adrian Todorov
ebd2ced30e Clarify the description of the Kubernetes entity alias configuration options (#26461) 2024-04-18 08:25:55 +01:00
Peter Wilson
8bee54c89d VAULT-24452: audit refactor (#26460)
* Refactor audit code into audit package
* remove builtin/audit
* removed unrequired files
2024-04-18 08:25:04 +01:00
Christopher Swenson
961bf20bdb Use enumer to generate String() methods for most enums (#25705)
We have many hand-written String() methods (and similar) for enums.
These require more maintenance and are more error-prone than using
automatically generated methods. In addition, the auto-generated
versions can be more efficient.

Here, we switch to using https://github.com/loggerhead/enumer, itself
a fork of https://github.com/diegostamigni/enumer, no longer maintained,
and a fork of the mostly standard tool
https://pkg.go.dev/golang.org/x/tools/cmd/stringer.
We use this fork of enumer for Go 1.20+ compatibility and because
we require the `-transform` flag to be able to generate
constants that match our current code base.

Some enums were not targeted for this change:
2024-04-17 11:14:14 -07:00
Noelle Daley
55241c2b09 fix: don't show an undefined error in flash msg when unsyncing (#26422)
* fix: don't show an undefined error in flash msg when unsyncing

* tests/int/secrets-test: add flash message tests
2024-04-17 10:35:41 -07:00
akshya96
bd9c9c5daa add reload census changes (#26456) 2024-04-17 10:14:49 -07:00
claire bontempo
3f19f8b0f0 UI: Add charts to ACME client count tab (#26385)
* use model returned by route model hook for ts declaration

* remove hasActivity helper

* refactor mirage so namespace totals are summed from monthly data

* add charts to acme tab

* add controller, update counts test

* add test for acme page

* selector cleanup

* update empty state handling for cc charts

* cleanup conditional logic

* add acme acceptance tests for filtering

* wrap up util updates

* finish acceptance tests

* update usage stats

* wrap up number updates from latest stubbed response
2024-04-16 20:58:54 -07:00
ram-parameswaran
3db6aa202c Add a logger message when a user has been locked out (#20886)
* When a locked out user tries to log in, log an error message indicating this

* Formatting code to enable PR precheck to pass

* Fix typo

Fix typo for comment about code change

* Edited wording and removed comment

---------

Co-authored-by: divyaac <divya.chandrasekaran@hashicorp.com>
Co-authored-by: divyaac <divyaac@berkeley.edu>
2024-04-16 17:58:23 -07:00
Violet Hynes
64a78cdb88 Fix incorrectly deferred unlock in Consul service registration (#26444) 2024-04-16 14:53:30 -04:00
Josh Black
a8a621f539 CE changes for https://github.com/hashicorp/vault-enterprise/pull/5695 (#26449) 2024-04-16 18:26:26 +00:00
Peter Wilson
38a78697c2 move noop audit to audit package (#26448) 2024-04-16 19:09:11 +01:00
Adrian Todorov
76be7fb832 Clarify the wordinf AWS auth docs around alias source (#26441) 2024-04-16 17:41:40 +01:00
Nick Cabatoff
89deeab507 Document replication canary and clock skew. (#25763) 2024-04-16 10:49:05 -04:00
Nick Cabatoff
d1e1d47b05 Update api docs to reflect changes brought in by replication canary and clock skew (#25762) 2024-04-16 09:12:31 -04:00
Theron Voran
69fb6c77c9 docs/vault-agent-injector: cross namespace secret sharing example (#26386)
Adds an agent injector example showing annotations for cross namespace
secret sharing.

---------

Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>
2024-04-15 15:14:07 -07:00
Theron Voran
6df779f1ba agent: allow setting auto-auth and vault.namespace separately (#26427)
The new vault.namespace config option seems to always be overridden by
the auto-auth namespace, so add an extra check to allow them to be set
separately.

---------

Co-authored-by: Violet Hynes <violet.hynes@hashicorp.com>
2024-04-15 21:05:38 +00:00
Chelsea Shaw
51ee69d02c UI: show banner when batch token expired (#26396)
* allow token expiry for batch token

* add changelog
2024-04-15 16:04:10 -05:00
Meggie
d52db741f5 Add to admin namespace (#26293)
* Add to admin namespace

Add sys/config/group-policy-application to admin namespace endpoints.

* Endpoint can now be accessed from admin ns
2024-04-15 16:49:47 -04:00
Chelsea Shaw
349e449d49 UI: Glimmerize replication enable form (#26417)
* Glimmerize replication controllers

* Add enable-replication-form component with tests

* use EnableReplicationForm in index and mode routes

* clean up enable action from replication-actions mixin

* fix test failure for structuredClone

* stabilize tests, remove enable action from replication-actions and replication-summary

* Update ui/lib/replication/addon/controllers/replication-mode.js

Co-authored-by: claire bontempo <68122737+hellobontempo@users.noreply.github.com>

* address PR comments

* stabilize oidc test?

---------

Co-authored-by: claire bontempo <68122737+hellobontempo@users.noreply.github.com>
2024-04-15 15:30:33 -05:00
Nick Cabatoff
2560beea8e CE part of https://github.com/hashicorp/vault-enterprise/pull/4269 (#26406) 2024-04-15 20:08:57 +00:00
akshya96
0701cc368c adding retention months to census reports CE (#26405)
* adding retention months to census reports CE changes

* using stubmaker

* make fmt

* change reload census agent to reload census
2024-04-15 12:07:22 -07:00
Sarah Chavis
6c01838269 fix release notes (#26404) 2024-04-15 12:06:35 -07:00
JJ
37c5982761 Editorial changes to integrated-storage.mdx (#26416)
Approximately half a dozen fixes to spelling and grammar.

Co-authored-by: Yoko Hyakuna <yoko@hashicorp.com>
2024-04-15 11:51:11 -07:00
Douglas Thomson
9302827ad8 Adding migrate parameter for the unseal operation (#25550)
* ADding migrate parameter for the unseal operation

* Removing version availability statement

* Adding changelog file

---------

Co-authored-by: Anton Averchenkov <84287187+averche@users.noreply.github.com>
2024-04-15 13:17:10 -04:00
Chris Capurso
e1c3f4ac17 clarfiy login MFA not supported for token auth (#26411) 2024-04-15 11:09:59 -04:00
CJ
1362f92477 Move Protecting secrets with Vault transform secrets engine to Vault Transform (#26378)
* first commit to move article from waf to vault docs

* Apply suggestions from code review

Co-authored-by: Brian Shumate <brianshumate@users.noreply.github.com>

* Apply suggestions from code review

Co-authored-by: Brian Shumate <brianshumate@users.noreply.github.com>

* Apply suggestions from code review

Co-authored-by: Brian Shumate <brianshumate@users.noreply.github.com>

* Update transform.mdx

Updated the description and moved image.

* updated resources

* passive voice fix

* passive voice fix

* Apply suggestions from code review

Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>

* Apply suggestions from code review

Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>

---------

Co-authored-by: Brian Shumate <brianshumate@users.noreply.github.com>
Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>
2024-04-15 10:53:38 -04:00
Noelle Daley
c5fd03d943 [Embroider] remove/upgrade dependencies to unblock Embroider (#26245)
* chore: upgrade ember-concurrency

* chore: remove ember-copy for ES6 spread or structuredClone

* chore: remove sass-svg-uri usage

* chore: remove ember-maybe-in-element

* chore: explicitly install sinon

* chore(pki): fix pki engine deps

* chore: bump ember-svg-jar

---------

Co-authored-by: Matthew Irish <matthew@hashicorp.com>
2024-04-12 23:33:10 +00:00
akshya96
5ba4d7b2d4 Revert "adding retention months to census reports CE (#26175)" (#26402)
This reverts commit 8605230df7.
2024-04-12 22:56:58 +00:00
soly-hashicorp
140b415e2c Update 1.16.1.mdx (#26373)
Secret Syncing is no longer in Beta and is now GA in 1.16.1
2024-04-12 15:48:45 -07:00
Chelsea Shaw
52c0dc812b UI: Dependency bumps 1.17.x (#26346)
* re-form yarn.lock, remove resolutions that are out of date. resolves:

- mout VAULT-25595 VAULT-25603
- follow-redirects VAULT-25605
- terser VAULT-25594 VAULT-25593
- minimatch VAULT-25591
- loader-utils VAULT-25216 VAULT-25590 VAULT-25589 VAULT-25588 VAULT-25587
- decode-uri-component VAULT-25586
- qs VAULT-25585
- @xmldom/xmldom VAULT-25217

* VAULT-25596 pin async in resolutions due to testem > fireworm

* VAULT-25606 pin nth-check due to ember-svg-jar

* fix typescript errors after bump

* update ember-template-lint to 6.0.0

* Add broken rules to template-eslintrc

* pin ansi-html

* remove ember-d3 in favor of specific d3 libraries we import

* add changelog
2024-04-12 22:13:45 +00:00
John-Michael Faircloth
1ee302dfcd plugin/wif: support external plugins (#26384)
* plugin/wif: support external plugins

* changelog
2024-04-12 21:16:26 +00:00
Theron Voran
e4f9d024c8 docs/vault-helm: updates for v0.28.0 release (#26282) 2024-04-12 13:37:56 -07:00
akshya96
8605230df7 adding retention months to census reports CE (#26175)
* adding retention months to census reports CE changes

* using stubmaker

* make fmt
2024-04-12 13:20:49 -07:00