Commit Graph

1347 Commits

Author SHA1 Message Date
prajnamohan1
b3c94de04b backport of commit 7ffad66b0b 2024-01-08 19:22:03 +00:00
hc-github-team-secure-vault-core
1334ebee88 backport of commit ee0ccea547 (#24699)
Co-authored-by: claire bontempo <68122737+hellobontempo@users.noreply.github.com>
2024-01-07 20:23:49 +00:00
Hamid Ghaf
96cfe2c0d8 release log gate if disable-gated-logs flag is set (#24280) (#24475)
* release log gate if disable-gated-logs flag is set

* CL

* Update changelog/24280.txt



---------

Co-authored-by: Peter Wilson <peter.wilson@hashicorp.com>
Co-authored-by: Josh Black <raskchanky@gmail.com>
2023-12-11 13:12:51 -08:00
hc-github-team-secure-vault-core
79f170d0f0 backport of commit 91ec1a788b (#24362)
Co-authored-by: Scott Miller <smiller@hashicorp.com>
2023-12-04 22:58:15 +00:00
hc-github-team-secure-vault-core
b0b53cf811 backport of commit 4a7bee5a02 (#24334)
Co-authored-by: Mike Palmiotto <mike.palmiotto@hashicorp.com>
2023-12-01 20:35:17 +00:00
hc-github-team-secure-vault-core
0fe4970c06 fix -log-file so that it uses the correct name and only adds timestamps on rotation (#24297) (#24321)
* fix -log-file so that it uses the correct name and only adds timestamps on rotation

* added some tests for naming/rotation

* changelog

* revert to previous way of getting created time

* remove unused stat

* comment shuffle

* Update changelog/24297.txt



* Update website/content/docs/agent-and-proxy/agent/index.mdx

Update 'agent' docs page



* Update website/content/docs/agent-and-proxy/proxy/index.mdx

Update 'proxy' docs page



* Update website/content/docs/commands/server.mdx

Update 'server' docs page



* fix typos

---------

Co-authored-by: Peter Wilson <peter.wilson@hashicorp.com>
Co-authored-by: Violet Hynes <violet.hynes@hashicorp.com>
Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>
2023-12-01 12:33:00 +00:00
hc-github-team-secure-vault-core
02edc12981 backport of UI: prevent replication disable action from sending payload (#24295)
Co-authored-by: Chelsea Shaw <82459713+hashishaw@users.noreply.github.com>
2023-11-29 23:09:50 +00:00
hc-github-team-secure-vault-core
4e676c55a1 backport of commit c329ed8d3b (#24259)
Co-authored-by: Steven Clark <steven.clark@hashicorp.com>
2023-11-27 16:19:36 -05:00
hc-github-team-secure-vault-core
d20526b09b backport of commit bcbd45b380 (#24197)
Co-authored-by: Steven Clark <steven.clark@hashicorp.com>
2023-11-20 16:09:12 +00:00
hc-github-team-secure-vault-core
c029f6fb10 PKI: Do not set NextUpdate OCSP field when ocsp_expiry is 0 (#24192) (#24194)
* Do not set NextUpdate OCSP field when ocsp_expiry is 0

* Add cl

Co-authored-by: Steven Clark <steven.clark@hashicorp.com>
2023-11-20 16:03:13 +00:00
hc-github-team-secure-vault-core
6309ee7330 backport of UI: Allow token configuration tune (#24148)
Co-authored-by: Chelsea Shaw <82459713+hashishaw@users.noreply.github.com>
2023-11-15 17:35:45 -06:00
Chelsea Shaw
8d2ae17dae UI: helper sort-objects to alphabetize list items (#24103) (#24146)
* move list to component

* use helper instead

* add changelog

* clarify changelog copy

* delete components now that helper is in use

* move helper to util, remove template helper invokation

* add optional sorting to lazyPaginatedQuery based on sortBy query attribute

* Add serialization to entity-alias and entity so that they can be sorted by name on list view

* Same logic as base normalizeItems for extractLazyPaginatedData so that metadata shows on list

* Add headers

---------

Co-authored-by: claire bontempo <68122737+hellobontempo@users.noreply.github.com>
2023-11-15 20:58:10 +00:00
hc-github-team-secure-vault-core
170ae17628 backport of commit 0ab8cfdff6 (#24137)
Co-authored-by: davidadeleon <56207066+davidadeleon@users.noreply.github.com>
2023-11-15 09:40:17 -05:00
Hamid Ghaf
7a24549178 update go version to 1.20.11 (#24124) 2023-11-14 13:23:04 -08:00
hc-github-team-secure-vault-core
625797eefc Backport of fix log_requests_level misconfiguration into release/1.13.x (#24057)
* backport of commit 0f5f648c1c

* changelog

---------

Co-authored-by: Peter Wilson <peter.wilson@hashicorp.com>
2023-11-08 10:11:10 +00:00
hc-github-team-secure-vault-core
39680359a1 backport of commit 7ec3867eea (#24030)
Co-authored-by: Nick Cabatoff <ncabatoff@hashicorp.com>
2023-11-06 15:45:32 +00:00
Hamid Ghaf
e8ebe6b565 Revert "Automatically track subloggers in allLoggers (#22038)" (#24004)
This reverts commit 4c8cc87794.
2023-11-03 14:39:56 -07:00
hc-github-team-secure-vault-core
cbb4be0715 backport of commit 63ab253cb4 (#23928)
Co-authored-by: Ellie <ellie.sterner@hashicorp.com>
2023-10-31 15:18:59 -05:00
hc-github-team-secure-vault-core
d30fb99987 backport of commit 9b1120b083 (#23916)
Co-authored-by: davidadeleon <56207066+davidadeleon@users.noreply.github.com>
2023-10-31 10:48:51 -04:00
hc-github-team-secure-vault-core
23d8f66f67 Backport of core: fix bug where deadlock detection was always on for expiration and quotas into release/1.13.x (#23903)
* backport of commit 66494c8129

* remove slices

* remove slices

---------

Co-authored-by: Jason O'Donnell <2160810+jasonodonnell@users.noreply.github.com>
2023-10-30 14:29:42 -04:00
hc-github-team-secure-vault-core
c1fc86a66d backport of commit 26bae55997 (#23899)
Co-authored-by: Hamid Ghaf <83242695+hghaf099@users.noreply.github.com>
2023-10-30 08:47:22 -07:00
hc-github-team-secure-vault-core
6a1dcf2bdb backport of commit 425b1e333d (#23884)
Co-authored-by: Josh Black <raskchanky@gmail.com>
2023-10-27 16:38:22 +00:00
hc-github-team-secure-vault-core
52879c0f0c Backport of api/seal-status: fix deadlock when namespace is set on seal-status calls into release/1.13.x (#23877)
* api/seal-status: fix deadlock when namespace is set on seal-status calls (#23861)

* api/seal-status: fix deadlock when namespace is set on seal-status calls

* changelog

* oops

* Fix seal type

---------

Co-authored-by: Jason O'Donnell <2160810+jasonodonnell@users.noreply.github.com>
2023-10-27 14:49:04 +00:00
hc-github-team-secure-vault-core
fa2be335d4 backport of commit fb97a459ec (#23875)
Co-authored-by: miagilepner <mia.epner@hashicorp.com>
2023-10-27 14:19:07 +00:00
hc-github-team-secure-vault-core
92e48f0093 Update hashicorp/vault-plugin-secrets-mongodbatlas to v0.10.2 (#23849) (#23850)
* Automated dependency upgrades

* Add changelog

---------

Co-authored-by: hc-github-team-secure-vault-ecosystem <hc-github-team-secure-vault-ecosystem@users.noreply.github.com>
2023-10-26 10:05:53 -04:00
hc-github-team-secure-vault-core
20e05a7b90 backport of commit 8c95d904f7 (#23838)
Co-authored-by: akshya96 <87045294+akshya96@users.noreply.github.com>
2023-10-25 14:38:40 -07:00
hc-github-team-secure-vault-core
239ccdd259 backport of commit 87376a1f5c (#23789)
Co-authored-by: Hamid Ghaf <83242695+hghaf099@users.noreply.github.com>
2023-10-23 16:23:35 +00:00
davidadeleon
b7e8bf96cc Revert "Implement user lockout log (#23140)" (#23767)
This reverts commit 8f70fb907458ae0325191deba35b476e1a4bc33f.
2023-10-20 16:17:35 +00:00
hc-github-team-secure-vault-core
24a15ddc08 backport of commit 28e3b78e8e (#23759)
Co-authored-by: Jason O'Donnell <2160810+jasonodonnell@users.noreply.github.com>
2023-10-20 14:25:03 +00:00
hc-github-team-secure-vault-core
01df297336 backport of commit d0501db90f (#23744)
Co-authored-by: Steven Clark <steven.clark@hashicorp.com>
2023-10-19 19:49:07 +00:00
Christopher Swenson
697ff5494b Update go to version 1.20.10 (#23714)
And update:
* `google.golang.org/grpc` v1.53.0 => v1.58.3
* `golang.org/x/net` v0.10.0 => v0.17.0

and run `go mod tidy`
2023-10-17 15:31:13 -07:00
hc-github-team-secure-vault-core
141014d552 backport of commit 4e3b91d91f (#22567) (#23692)
* backport of commit 4e3b91d91f (#22567)

* workerpool implementation

* rollback tests

* website documentation

* add changelog

* fix failing test

* backport of commit de043d6736 (#22754)

* fix flaky rollback test

* better fix

* switch to defer

* add comment

---------

Co-authored-by: miagilepner <mia.epner@hashicorp.com>
2023-10-17 14:34:38 +02:00
hc-github-team-secure-vault-core
3f9537ede0 backport of commit 7872338ec1 (#23638)
Co-authored-by: Jason O'Donnell <2160810+jasonodonnell@users.noreply.github.com>
2023-10-16 16:43:05 -04:00
hc-github-team-secure-vault-core
9f1f8e871d Implement user lockout log (#23140) (#23561)
* implement user lockout logger

* formatting

* make user lockout log interval configurable

* create func to get locked user count, and fix potential deadlock

* fix test

* fix test

* add changelog

Co-authored-by: davidadeleon <56207066+davidadeleon@users.noreply.github.com>
2023-10-09 12:43:48 -04:00
hc-github-team-secure-vault-core
a971b70fc4 events: Ignore send context (#23500) (#23536)
When sending an event asynchronously, the original context used for
whatever generated the event (probably a synchronous, quick HTTP
context) is probably not what is wanted for sending the event, which
could face delays if a consumer is backed up.

I will admit myself to sometimes having "context blindness", where
I just take whatever context is incoming in a function and thread it
out to all calls. Normally this is the right thing to do when, say,
tying downstream API calls to an upstream HTTP timeout.

When making KV events, for example, we used the HTTP context for
`SendEvent()`, and this can cause the events to be dropped if they
aren't taken from the channel before the HTTP request finishes.

In retrospect, it was probably unnecessary to include a context in
the `SendEvent` interface.

We keep the context in place for backwards compability, but also in
case we want to use it for purposes other than timeouts and
cancellations in the future.

Co-authored-by: Christopher Swenson <christopher.swenson@hashicorp.com>
2023-10-05 21:34:00 +00:00
hc-github-team-secure-vault-core
ced9aaa3aa backport of commit 9019203e9f (#23490)
Co-authored-by: Conor McCullough <103977699+conor-mccullough@users.noreply.github.com>
2023-10-04 09:13:09 -05:00
hc-github-team-secure-vault-core
3388dab4e6 backport of commit 547bff752e (#23320) 2023-09-27 16:03:40 -04:00
hc-github-team-secure-vault-core
4c785b0584 backport of commit 1d61aeb8ae (#23251)
Co-authored-by: Sergey Kutovoy <kutovoy.s@gmail.com>
2023-09-22 15:38:46 +00:00
hc-github-team-secure-vault-core
7a0f9fe25f backport of UI: handle control group error on SSH (#23033)
Co-authored-by: Chelsea Shaw <82459713+hashishaw@users.noreply.github.com>
2023-09-20 10:49:52 -05:00
hc-github-team-secure-vault-core
2b81921e7b backport of commit c73eacbaf6 (#23173)
Co-authored-by: akshya96 <87045294+akshya96@users.noreply.github.com>
2023-09-19 19:48:10 +00:00
hc-github-team-secure-vault-core
a78fe24e77 backport of commit 3f9b6075aa (#23126)
Backport of UI: add SSH role attribute allowed_domains_template
Co-authored-by: Chelsea Shaw <82459713+hashishaw@users.noreply.github.com>
2023-09-18 15:39:51 +00:00
hc-github-team-secure-vault-core
c4a31dacf0 Backport of Clean up unused CRL entries when issuer is removed into release/1.13.x (#23029)
* backport of commit e2ff1f1c71 (#23030)

Co-authored-by: Alexander Scheel <alex.scheel@hashicorp.com>

* backport of commit 293e8b8ac5 (#23045)

Co-authored-by: Steven Clark <steven.clark@hashicorp.com>

* Fix call of crlBuilder.rebuild

Signed-off-by: Alexander Scheel <alex.scheel@hashicorp.com>

---------

Signed-off-by: Alexander Scheel <alex.scheel@hashicorp.com>
Co-authored-by: Alexander Scheel <alex.scheel@hashicorp.com>
Co-authored-by: Steven Clark <steven.clark@hashicorp.com>
2023-09-13 13:57:36 +00:00
hc-github-team-secure-vault-core
91c9e1e6f4 Backport of UI: [VAULT-18040] List all features in license info into release/1.13.x (#23004)
Co-authored-by: Kianna <30884335+kiannaquach@users.noreply.github.com>
2023-09-12 10:20:57 -07:00
Kianna
2e332ecf52 UI: [VAULT-18178] Fix filter/search bug for pki role (#22810) 2023-09-12 08:48:38 -07:00
Hamid Ghaf
bf256af40d bump go version to 1.20.8 on 1.13.x (#22935) 2023-09-08 19:16:59 +00:00
Scott Miller
8abe3cd68b Reject supplied nonces for non-convergent encryption operations (#22852) (#22901)
* Reject supplied nonces for non-convergent encryption operations (#22852)

Backport to 1.13.x

* need http after all
2023-09-08 09:59:21 -05:00
hc-github-team-secure-vault-core
2eea7faf61 backport of commit 3130e8ba94 (#22867) 2023-09-07 20:01:16 +00:00
Scott Miller
3bbcbd4853 Update go-kms-wrapping to get Azure HTTP/2 workaround (1.13.x) (#22769)
* Update go-kms-wrapping to get Azure HTTP/2 workaround (1.13.x)

* changelog

* Revert "Update go-kms-wrapping to get Azure HTTP/2 workaround (1.13.x)"

This reverts commit 17fbce3a79039dbbebab802d35839182b2342642.

* Re-attempt th update of the azure wrapper
2023-09-05 14:52:19 -05:00
hc-github-team-secure-vault-core
9a9f21ff67 backport of commit 4c8cc87794 (#22246)
Co-authored-by: Mike Palmiotto <mike.palmiotto@hashicorp.com>
2023-09-01 13:16:25 -04:00
hc-github-team-secure-vault-core
9042812f82 Backport of Add config value that gives users options to skip calculating role for each lease into release/1.13.x (#22729)
* Add config value that gives users options to skip calculating role for each lease (#22651)

* Add config value that gives users options to skip calculating role for each lease

* add changelog

* change name

* add config for testing

* Update changelog/22651.txt

Co-authored-by: Violet Hynes <violet.hynes@hashicorp.com>

* update tests, docs and reorder logic in conditional

* fix comment

* update comment

* fix comment again

* Update comments and change if order

* change comment again

* add other comment

* fix tests

* add documentation

* edit docs

* Update http/util.go

Co-authored-by: Mike Palmiotto <mike.palmiotto@hashicorp.com>

* Update vault/core.go

* Update vault/core.go

* update var name

* udpate docs

* Update vault/request_handling.go

Co-authored-by: Mike Palmiotto <mike.palmiotto@hashicorp.com>

* 1 more docs change

---------

Co-authored-by: Violet Hynes <violet.hynes@hashicorp.com>
Co-authored-by: Mike Palmiotto <mike.palmiotto@hashicorp.com>

* remove wrong part of cherry-pick

---------

Co-authored-by: Ellie <ellie.sterner@hashicorp.com>
Co-authored-by: Violet Hynes <violet.hynes@hashicorp.com>
Co-authored-by: Mike Palmiotto <mike.palmiotto@hashicorp.com>
2023-09-01 08:07:21 -05:00