Scott Miller
39df7fa973
Revert azure key wrapper to undo auth regression ( #29775 )
2025-02-28 16:21:15 +00:00
Ryan Cragun
58a49e6ce0
VAULT-33758: IPv6 address conformance for proxy and agent ( #29517 )
...
This is a follow-up to our initial work[0] to address RFC-5952 §4 conformance for IPv6 addresses in Vault. The initial pass focused on the vault server configuration and start-up routines. This follow-up focuses on Agent and Proxy, with a few minor improvements for server.
The approach generally mirrors the server implementation but also adds support for normalization with CLI configuration overrides.
One aspect we do not normalize currently is Agent/Proxy client creation to the Vault server with credentials taken from environment variables, as it would require larger changes to the `api` module. In practice this ought to be fine for the majority of cases.
[0]: https://github.com/hashicorp/vault/pull/29228
2025-02-27 15:57:46 -07:00
Shannon Roberts (Beagin)
018674a798
[VAULT-33969] UI: replace readonly JsonEditor with Hds::CodeBlock ( #29720 )
...
* http://localhost:4200/ui/vault/secrets/kubernetes/kubernetes/roles/test/details readOnly JsonEditor to Hds::CodeBlock
* http://localhost:4200/ui/vault/policies/acl/create readonly JsonEditor to Hds::CodeBlock
* http://localhost:4200/ui/vault/policy/acl/default readonly JsonEditor to Hds::CodeBlock
* http://localhost:4200/ui/vault/access/oidc/scopes/test/details readonly JsonEditor to Hds::CodeBlock
* http://localhost:4200/ui/vault/access/oidc/scopes/create readonly JsonEditor to Hds::CodeBlock
* fix (some) tests
* fix remaining tests
* add changelog
2025-02-27 18:42:07 +00:00
hc-github-team-secure-vault-core
5828be040a
Update vault-plugin-secrets-gcp to v0.21.1 ( #29747 )
...
* Update vault-plugin-secrets-gcp to v0.21.1
* Add changelog
---------
Co-authored-by: hc-github-team-secure-vault-ecosystem <hc-github-team-secure-vault-ecosystem@users.noreply.github.com >
2025-02-27 12:29:55 -06:00
hc-github-team-secure-vault-core
3bd1ae5007
Update vault-plugin-auth-gcp to v0.20.1 ( #29736 )
...
* Update vault-plugin-auth-gcp to v0.20.1
* Add changelog
---------
Co-authored-by: hc-github-team-secure-vault-ecosystem <hc-github-team-secure-vault-ecosystem@users.noreply.github.com >
2025-02-27 11:44:40 -06:00
hc-github-team-secure-vault-core
4be8c4a96d
Update vault-plugin-secrets-azure to v0.21.1 ( #29729 )
2025-02-26 22:49:40 +00:00
hc-github-team-secure-vault-core
b78dfa5ff6
Update vault-plugin-auth-azure to v0.20.1 ( #29728 )
2025-02-26 22:45:43 +00:00
hc-github-team-secure-vault-core
9b8d8fb4ff
Update vault-plugin-secrets-openldap to v0.15.1 ( #29727 )
...
---------
Co-authored-by: hc-github-team-secure-vault-ecosystem <hc-github-team-secure-vault-ecosystem@users.noreply.github.com >
2025-02-26 22:44:16 +00:00
Steven Clark
74d02c8a43
Fix some formatting issues for Go changelogs ( #29710 )
2025-02-25 14:43:59 -05:00
lane-wetmore
13d302d509
UI: Add KV view for wrap tool ( #29677 )
...
* add kv view for wrap tool
* add changelog entry
* update toggle and tests
* update changelog, style updates, fix linting error bug
* update tests
* update test to include multiline input
* clean up
* test improvements and clean up
* shift away from disabling button on error
* update test for json lint warning
* add check after back
* move assertions to a better test for them
2025-02-24 20:21:21 -06:00
Jenny Deng
b93e8e817c
Fix bug with merging vault agent configs that set template_config ( #29680 )
...
* fix bug with merging configs with TemplateConfig and add test
* add changelog
2025-02-24 10:56:03 -08:00
John-Michael Faircloth
e2f09cb2ab
database: fix reload to not fail early ( #29519 )
...
* database: fix reload to not fail early
* return logical.ErrorRresponse; add tests
* do not return noop warnings; add logs
* changelog
* use name for log; remove event doc
2025-02-20 14:53:58 +00:00
Dan Rivera
dd8a0d57a8
UI: adding skip import rotation field when creating static roles ( #29633 )
...
* adding skip import rotation field to ui
* changing labels and subtext
* removing readonly, user input on edit would not affect value
* changelog
* fix test
* fix test2
2025-02-19 18:49:46 -05:00
Steven Clark
75c295131a
Update Go to 1.23.6 on main ( #29660 )
2025-02-17 14:29:15 -05:00
hc-github-team-secure-vault-core
64e92ba9fd
Update vault-plugin-secrets-ad to v0.20.1 ( #29648 )
...
* Update vault-plugin-secrets-ad to v0.20.1
* Add changelog
---------
Co-authored-by: hc-github-team-secure-vault-ecosystem <hc-github-team-secure-vault-ecosystem@users.noreply.github.com >
2025-02-14 20:56:46 +00:00
hc-github-team-secure-vault-core
b756fe6c0e
Update vault-plugin-secrets-azure to v0.21.0 ( #29639 )
...
---------
Co-authored-by: hc-github-team-secure-vault-ecosystem <hc-github-team-secure-vault-ecosystem@users.noreply.github.com >
2025-02-13 19:01:47 -05:00
hc-github-team-secure-vault-core
513f5a96b1
Backport of update vault-plugin-auth-oci to v0.18.0 into release/1.19.x ( #29620 )
...
* Update vault-plugin-auth-kerberos to v0.14.0
* Add changelog
* Update vault-plugin-auth-oci to v0.18.0
* Add changelog
---------
Co-authored-by: hc-github-team-secure-vault-ecosystem <hc-github-team-secure-vault-ecosystem@users.noreply.github.com >
Co-authored-by: Jaired Jawed <jaired.jawed@hashicorp.com >
2025-02-13 23:20:01 +00:00
hc-github-team-secure-vault-core
a57972713d
Update vault-plugin-auth-kerberos to v0.14.0 ( #29617 )
...
* Update vault-plugin-auth-kerberos to v0.14.0
* Add changelog
---------
Co-authored-by: hc-github-team-secure-vault-ecosystem <hc-github-team-secure-vault-ecosystem@users.noreply.github.com >
Co-authored-by: Jaired Jawed <jaired.jawed@hashicorp.com >
2025-02-13 22:55:01 +00:00
Theron Voran
86d23d614f
CE changes for VAULT-33452 ( #29618 )
2025-02-13 13:41:20 -08:00
lane-wetmore
4b05b590f5
UI: MFA methods now display namespace_path instead of namespace_id ( #29588 )
...
* update mfa methods to use namespace_path instead of namespace_id
* add test for empty namespace path and add namespace path to factories
* add changelog entry
* fix name
* hide namespace label when path is empty and test updates
2025-02-13 21:16:34 +00:00
kpcraig
db0d911683
Add support code for auth/ldap root autorotation ( #29535 )
...
---------
Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com >
2025-02-13 16:06:47 -05:00
hc-github-team-secure-vault-core
6efe9c7142
Update vault-plugin-auth-kubernetes to v0.21.0 ( #29619 )
...
* Update vault-plugin-auth-kubernetes to v0.21.0
* Add changelog
---------
Co-authored-by: hc-github-team-secure-vault-ecosystem <hc-github-team-secure-vault-ecosystem@users.noreply.github.com >
2025-02-13 12:45:56 -08:00
hc-github-team-secure-vault-core
3fe8dfce13
Update vault-plugin-secrets-kv to v0.21.0 ( #29614 )
...
* Update vault-plugin-secrets-kv to v0.21.0
* Add changelog
---------
Co-authored-by: hc-github-team-secure-vault-ecosystem <hc-github-team-secure-vault-ecosystem@users.noreply.github.com >
2025-02-13 14:02:05 -05:00
hc-github-team-secure-vault-core
d3c14d577f
Update vault-plugin-auth-alicloud to v0.20.0 ( #29613 )
...
* Update vault-plugin-auth-alicloud to v0.20.0
* Add changelog
---------
Co-authored-by: hc-github-team-secure-vault-ecosystem <hc-github-team-secure-vault-ecosystem@users.noreply.github.com >
2025-02-13 14:01:09 -05:00
hc-github-team-secure-vault-core
cf8b6ba70b
Update vault-plugin-secrets-gcpkms to v0.20.0 ( #29612 )
...
* Update vault-plugin-secrets-gcpkms to v0.20.0
* Add changelog
---------
Co-authored-by: hc-github-team-secure-vault-ecosystem <hc-github-team-secure-vault-ecosystem@users.noreply.github.com >
2025-02-13 14:00:50 -05:00
hc-github-team-secure-vault-core
4feed3d382
Update vault-plugin-auth-azure to v0.20.0 ( #29606 )
...
* Update vault-plugin-auth-azure to v0.20.0
* Add changelog
---------
Co-authored-by: hc-github-team-secure-vault-ecosystem <hc-github-team-secure-vault-ecosystem@users.noreply.github.com >
2025-02-13 11:38:37 -05:00
hc-github-team-secure-vault-core
c397423c37
Update vault-plugin-secrets-openldap to v0.15.0 ( #29605 )
...
---------
Co-authored-by: hc-github-team-secure-vault-ecosystem <hc-github-team-secure-vault-ecosystem@users.noreply.github.com >
2025-02-13 11:34:25 -05:00
hc-github-team-secure-vault-core
b17c6d5b6d
Update vault-plugin-secrets-gcp to v0.21.0 ( #29598 )
...
* Update vault-plugin-secrets-gcp to v0.21.0
* Add changelog
* Update 29598.txt
---------
Co-authored-by: hc-github-team-secure-vault-ecosystem <hc-github-team-secure-vault-ecosystem@users.noreply.github.com >
Co-authored-by: robmonte <17119716+robmonte@users.noreply.github.com >
2025-02-13 05:43:49 +00:00
hc-github-team-secure-vault-core
2493fc7355
Update vault-plugin-database-redis to v0.5.0 ( #29597 )
...
Co-authored-by: hc-github-team-secure-vault-ecosystem <hc-github-team-secure-vault-ecosystem@users.noreply.github.com >
2025-02-13 01:15:53 +00:00
hc-github-team-secure-vault-core
1c77670afa
Update vault-plugin-database-redis-elasticache to v0.6.0 ( #29594 )
...
Co-authored-by: hc-github-team-secure-vault-ecosystem <hc-github-team-secure-vault-ecosystem@users.noreply.github.com >
2025-02-12 23:52:15 +00:00
hc-github-team-secure-vault-core
8611a24d84
Update vault-plugin-auth-gcp to v0.20.0 ( #29591 )
...
* Update vault-plugin-auth-gcp to v0.20.0
* Add changelog
* Update 29591.txt
---------
Co-authored-by: hc-github-team-secure-vault-ecosystem <hc-github-team-secure-vault-ecosystem@users.noreply.github.com >
Co-authored-by: robmonte <17119716+robmonte@users.noreply.github.com >
2025-02-12 17:28:05 -06:00
hc-github-team-secure-vault-core
73d16609dc
Update vault-plugin-secrets-kubernetes to v0.10.0 ( #29592 )
...
* Update vault-plugin-secrets-kubernetes to v0.10.0
* Add changelog
---------
Co-authored-by: hc-github-team-secure-vault-ecosystem <hc-github-team-secure-vault-ecosystem@users.noreply.github.com >
2025-02-12 15:25:31 -08:00
hc-github-team-secure-vault-core
04b2e377c7
Update vault-plugin-database-mongodbatlas to v0.14.0 ( #29584 )
...
* Update vault-plugin-database-mongodbatlas to v0.14.0
* Add changelog
---------
Co-authored-by: hc-github-team-secure-vault-ecosystem <hc-github-team-secure-vault-ecosystem@users.noreply.github.com >
Co-authored-by: Milena Zlaticanin <60530402+Zlaticanin@users.noreply.github.com >
2025-02-12 13:46:21 -07:00
Amir Aslamov
6a30d4e5b0
VAULT-33603: normalize start time in export api ( #29562 )
...
* copy subset of oss changes from ent pr
* add changelog entree
2025-02-12 15:16:34 -05:00
hc-github-team-secure-vault-core
52ab80caec
Update vault-plugin-secrets-mongodbatlas to v0.14.0 ( #29583 )
...
* Update vault-plugin-secrets-mongodbatlas to v0.14.0
* Add changelog
---------
Co-authored-by: hc-github-team-secure-vault-ecosystem <hc-github-team-secure-vault-ecosystem@users.noreply.github.com >
2025-02-12 13:12:48 -07:00
hc-github-team-secure-vault-core
9ba523a0d0
Update vault-plugin-database-elasticsearch to v0.17.0 ( #29542 )
...
* Update vault-plugin-database-elasticsearch to v0.17.0
* Add changelog
---------
Co-authored-by: hc-github-team-secure-vault-ecosystem <hc-github-team-secure-vault-ecosystem@users.noreply.github.com >
Co-authored-by: Michael Blaum <96261585+hashiblaum@users.noreply.github.com >
2025-02-11 20:10:50 +00:00
vinay-gopalan
9e38a88883
Add automated root rotation support to DB Secrets ( #29557 )
2025-02-11 12:09:26 -08:00
hc-github-team-secure-vault-core
b9ee65e302
Update vault-plugin-secrets-terraform to v0.11.0 ( #29541 )
...
* Update vault-plugin-secrets-terraform to v0.11.0
* Add changelog
---------
Co-authored-by: hc-github-team-secure-vault-ecosystem <hc-github-team-secure-vault-ecosystem@users.noreply.github.com >
Co-authored-by: Michael Blaum <96261585+hashiblaum@users.noreply.github.com >
2025-02-11 14:25:21 -05:00
hc-github-team-secure-vault-core
429d890efb
Update vault-plugin-database-couchbase to v0.13.0 ( #29543 )
...
* Update vault-plugin-database-couchbase to v0.13.0
* Add changelog
---------
Co-authored-by: hc-github-team-secure-vault-ecosystem <hc-github-team-secure-vault-ecosystem@users.noreply.github.com >
Co-authored-by: Michael Blaum <96261585+hashiblaum@users.noreply.github.com >
2025-02-11 14:23:21 -05:00
hc-github-team-secure-vault-core
6556857229
Update vault-plugin-database-snowflake to v0.13.0 ( #29554 )
...
* Update vault-plugin-database-snowflake to v0.13.0
* Add changelog
---------
Co-authored-by: hc-github-team-secure-vault-ecosystem <hc-github-team-secure-vault-ecosystem@users.noreply.github.com >
2025-02-11 18:41:57 +00:00
hc-github-team-secure-vault-core
41a9865a31
Update vault-plugin-auth-jwt to v0.23.0 ( #29553 )
...
* Update vault-plugin-auth-jwt to v0.23.0
* Add changelog
---------
Co-authored-by: hc-github-team-secure-vault-ecosystem <hc-github-team-secure-vault-ecosystem@users.noreply.github.com >
2025-02-11 18:07:50 +00:00
hc-github-team-secure-vault-core
5c9dedda48
Update vault-plugin-secrets-openldap to v0.14.5 ( #29551 )
...
* Update vault-plugin-secrets-openldap to v0.14.5
* Add changelog
---------
Co-authored-by: hc-github-team-secure-vault-ecosystem <hc-github-team-secure-vault-ecosystem@users.noreply.github.com >
2025-02-11 10:30:55 -06:00
vinay-gopalan
9b70487623
Automated rotate root support for AWS Auth and Secrets ( #29497 )
2025-02-10 18:36:44 -05:00
John-Michael Faircloth
8d0443fd48
db: honor static role TTL across restarts when skip import rotation i… ( #29537 )
...
* db: honor static role TTL across restarts when skip import rotation is enabled
* changelog
2025-02-10 15:28:19 -06:00
Kit Haines
49ecdad1ad
Sign empty to cert on manual-chain update. ( #29473 )
...
* Sign empty to cert on manual-chain update.
* Add role defaults.
* Add changelog.
* More useful error message.
* Suggestions from PR Review.
* Fixes to update as well as write; test that still fails; revert code.
* Unit Test fix.
* Add go doc to TestManualChainValidation
2025-02-10 15:24:52 -05:00
Dan Rivera
7fb0db7452
UI: Fix updating static roles via role edit page on UI ( #29498 )
...
* added check for updating static roles, appending full payload data
* pulling specific properties into payload obj to fix popups
* adding changelog
* add else to keep previous imp for dynamic roles
* removing separate request, utilizing snapshot
* renamed serialized data var, added comment for required username line
* adding test for editing static role
* updated test for edit payload
* Update changelog/29498.txt
Co-authored-by: claire bontempo <68122737+hellobontempo@users.noreply.github.com >
---------
Co-authored-by: claire bontempo <68122737+hellobontempo@users.noreply.github.com >
2025-02-10 14:15:50 -05:00
hc-github-team-secure-vault-core
784216310f
Update vault-plugin-secrets-alicloud to v0.19.0 ( #29512 )
...
* Update vault-plugin-secrets-alicloud to v0.19.0
* Add changelog
---------
Co-authored-by: hc-github-team-secure-vault-ecosystem <hc-github-team-secure-vault-ecosystem@users.noreply.github.com >
Co-authored-by: Michael Blaum <96261585+hashiblaum@users.noreply.github.com >
2025-02-07 15:09:47 -05:00
hc-github-team-secure-vault-core
b3baef9a81
Update vault-plugin-auth-cf to v0.20.0 ( #29528 )
...
* Update vault-plugin-auth-cf to v0.20.0
* Add changelog
---------
Co-authored-by: hc-github-team-secure-vault-ecosystem <hc-github-team-secure-vault-ecosystem@users.noreply.github.com >
2025-02-07 10:50:30 -08:00
Scott Miller
0a2049ca6a
Undo additions to the barrier encryption count if persisting those encryptions fails ( #29506 )
...
* Undo additions to the barrier encryption count if persisting those encryptions fails
* changelog
2025-02-05 13:22:53 -06:00
Nick Cabatoff
38c3e15e1e
Add support for reloading raft config ( #29485 )
2025-02-05 15:08:46 +00:00
