Commit Graph

18846 Commits

Author SHA1 Message Date
Austin Gebauer
d90c7e8ab5 systemview: adds method for plugins to generate identity tokens (#24929)
* systemview: adds method for plugins to generate identity tokens

* change test name and godoc

* adds changelog

* make proto to include comment
2024-01-18 11:01:14 -08:00
Steven Clark
ee1e7e1448 Call the invalid credential handler even with a delegated auth error handler (#24938)
- The specified delegated auth error handler should not have to
   worry about re-implementing the invalid credential handler logic. It
   should only worry about how to return/format the error back to
   the client.
2024-01-18 11:13:58 -05:00
dependabot[bot]
fa2e001850 Bump github.com/go-git/go-git/v5 from 5.7.0 to 5.11.0 (#24641)
Bumps [github.com/go-git/go-git/v5](https://github.com/go-git/go-git) from 5.7.0 to 5.11.0.
- [Release notes](https://github.com/go-git/go-git/releases)
- [Commits](https://github.com/go-git/go-git/compare/v5.7.0...v5.11.0)

---
updated-dependencies:
- dependency-name: github.com/go-git/go-git/v5
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Violet Hynes <violet.hynes@hashicorp.com>
2024-01-18 10:02:38 -05:00
dependabot[bot]
8a571a3e22 Bump actions/checkout from 3.5.3 to 4.1.1 (#24927)
Bumps [actions/checkout](https://github.com/actions/checkout) from 3.5.3 to 4.1.1.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v3.5.3...b4ffde65f46336ab88eb53be808477a3936bae11)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Violet Hynes <violet.hynes@hashicorp.com>
2024-01-18 14:31:52 +00:00
dependabot[bot]
0ca49161f9 Bump actions/setup-python from 4.6.1 to 5.0.0 (#24928)
Bumps [actions/setup-python](https://github.com/actions/setup-python) from 4.6.1 to 5.0.0.
- [Release notes](https://github.com/actions/setup-python/releases)
- [Commits](bd6b4b6205...0a5c615913)

---
updated-dependencies:
- dependency-name: actions/setup-python
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Violet Hynes <violet.hynes@hashicorp.com>
2024-01-18 14:30:03 +00:00
Heat Hamilton
287d1129da [website] Update node, npm and next versions in website directory (#24923)
* Update node, npm and next versions in website dir

* Updated node version to match npm versin 18.17.0
2024-01-18 14:12:31 +00:00
Stefan Zhelyazkov
f4978b3efd Updating Vault docs for JWT support of numeric bound_claims (#24921)
* Add a note that the role name is available as role in entity alias metadata

* Update JWT docs for numeric bound_claims
2024-01-18 13:57:30 +00:00
vinay-gopalan
5f3ff6b890 sdk: add identity token helpers to consistently apply fields in plugins (#24925) 2024-01-17 23:20:37 +00:00
Austin Gebauer
fd92f2c8ec identity/tokens: adds plugin issuer with openid-configuration and keys (#24898)
* identity/tokens: adds plugin issuer with openid-configuration and keys

* adds changelog

* typo in comment

* adds go doc to tests for linter
2024-01-17 13:22:42 -08:00
eknowles
8d7409e660 fix typo in vso platform docs (#24917) 2024-01-17 15:49:32 -05:00
Violet Hynes
074a35eac6 Update aws-sdk-go to latest (#24916) 2024-01-17 15:17:00 -05:00
dependabot[bot]
e43ae54e3b Bump json5 from 2.2.0 to 2.2.3 in /website (#20330)
Bumps [json5](https://github.com/json5/json5) from 2.2.0 to 2.2.3.
- [Release notes](https://github.com/json5/json5/releases)
- [Changelog](https://github.com/json5/json5/blob/main/CHANGELOG.md)
- [Commits](https://github.com/json5/json5/compare/v2.2.0...v2.2.3)

---
updated-dependencies:
- dependency-name: json5
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Violet Hynes <violet.hynes@hashicorp.com>
2024-01-17 14:01:43 -05:00
dependabot[bot]
3ca348a7e2 Bump tough-cookie from 4.0.0 to 4.1.3 in /website (#21700)
Bumps [tough-cookie](https://github.com/salesforce/tough-cookie) from 4.0.0 to 4.1.3.
- [Release notes](https://github.com/salesforce/tough-cookie/releases)
- [Changelog](https://github.com/salesforce/tough-cookie/blob/master/CHANGELOG.md)
- [Commits](https://github.com/salesforce/tough-cookie/compare/v4.0.0...v4.1.3)

---
updated-dependencies:
- dependency-name: tough-cookie
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Violet Hynes <violet.hynes@hashicorp.com>
2024-01-17 12:59:58 -05:00
dependabot[bot]
a94cadae28 Bump actions/setup-go from 4.0.1 to 5.0.0 (#24895)
Bumps [actions/setup-go](https://github.com/actions/setup-go) from 4.0.1 to 5.0.0.
- [Release notes](https://github.com/actions/setup-go/releases)
- [Commits](fac708d667...0c52d547c9)

---
updated-dependencies:
- dependency-name: actions/setup-go
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Violet Hynes <violet.hynes@hashicorp.com>
2024-01-17 16:52:39 +00:00
dependabot[bot]
c637b9e4c6 Bump actions/cache from 3.3.3 to 4.0.0 (#24897)
Bumps [actions/cache](https://github.com/actions/cache) from 3.3.3 to 4.0.0.
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](e12d46a63a...13aacd865c)

---
updated-dependencies:
- dependency-name: actions/cache
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Violet Hynes <violet.hynes@hashicorp.com>
2024-01-17 11:50:47 -05:00
John-Michael Faircloth
3fffae9452 pkcs7: fix slice out-of-bounds panic (#24891)
* pkcs7: fix slice out-of-bounds panic

* changelog

* fix tests

* add test case to capture panic; found in fuzzing

* add fuzz test
2024-01-17 10:12:00 -06:00
Tom Proctor
80f85a05f6 New root namespace plugin reload API sys/plugins/reload/:type/:name (#24878) 2024-01-17 15:46:27 +00:00
Nick Cabatoff
cadef7b2cd Fix multi-cluster raft tests that use TCP networking (#24894) 2024-01-16 20:18:08 +00:00
Kyle Schochenmaier
f84a6a24d7 add a link to the VSO threat model (#24769) 2024-01-16 12:41:31 -06:00
dependabot[bot]
fa33c87a1b Bump hashicorp/setup-terraform from 2 to 3 (#24873)
Bumps [hashicorp/setup-terraform](https://github.com/hashicorp/setup-terraform) from 2 to 3.
- [Release notes](https://github.com/hashicorp/setup-terraform/releases)
- [Changelog](https://github.com/hashicorp/setup-terraform/blob/main/CHANGELOG.md)
- [Commits](https://github.com/hashicorp/setup-terraform/compare/v2...v3)

---
updated-dependencies:
- dependency-name: hashicorp/setup-terraform
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Violet Hynes <violet.hynes@hashicorp.com>
2024-01-16 12:38:51 -05:00
Rachel Culpepper
ddcf131402 fix sighup test error (#24887) 2024-01-16 17:36:40 +00:00
Peter Wilson
a928c372b8 Audit: LogInput.Request Cloning update (#24885)
* use already existing Clone method for Request (and add extra fields that need manually setting)
2024-01-16 16:57:21 +00:00
Tom Proctor
f393241bb2 List plugin runtimes API always includes a list even if empty (#24864) 2024-01-16 16:36:07 +00:00
dependabot[bot]
d9f0587705 Bump actions/cache from 3.3.1 to 3.3.3 (#24875)
Bumps [actions/cache](https://github.com/actions/cache) from 3.3.1 to 3.3.3.
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](88522ab9f3...e12d46a63a)

---
updated-dependencies:
- dependency-name: actions/cache
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Violet Hynes <violet.hynes@hashicorp.com>
2024-01-16 11:05:49 -05:00
dependabot[bot]
9ae306a5f1 Bump aws-actions/configure-aws-credentials from 2.2.0 to 4.0.1 (#24872)
Bumps [aws-actions/configure-aws-credentials](https://github.com/aws-actions/configure-aws-credentials) from 2.2.0 to 4.0.1.
- [Release notes](https://github.com/aws-actions/configure-aws-credentials/releases)
- [Changelog](https://github.com/aws-actions/configure-aws-credentials/blob/main/CHANGELOG.md)
- [Commits](5fd3084fc3...010d0da01d)

---
updated-dependencies:
- dependency-name: aws-actions/configure-aws-credentials
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Violet Hynes <violet.hynes@hashicorp.com>
2024-01-16 11:04:15 -05:00
Violet Hynes
37b3adf056 Fix docs link typos (#24880) 2024-01-16 15:43:50 +00:00
Peter Wilson
ff0d1ff4c9 Audit: Entry formatting is the only supported way to do audit (#24867)
* removed 'writer' related code as we only do formatting within the eventlogger

* re-added ported test elide list responses
2024-01-15 21:04:21 +00:00
dependabot[bot]
ecb50a4cb3 Bump browser-actions/setup-chrome from 1.2.0 to 1.4.0 (#24834)
Bumps [browser-actions/setup-chrome](https://github.com/browser-actions/setup-chrome) from 1.2.0 to 1.4.0.
- [Release notes](https://github.com/browser-actions/setup-chrome/releases)
- [Changelog](https://github.com/browser-actions/setup-chrome/blob/master/CHANGELOG.md)
- [Commits](c485fa3bab...52f10de547)

---
updated-dependencies:
- dependency-name: browser-actions/setup-chrome
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Violet Hynes <violet.hynes@hashicorp.com>
2024-01-15 15:00:28 -05:00
dependabot[bot]
d6d67de2fb Bump test-summary/action from 2.1 to 2.2 (#24831)
Bumps [test-summary/action](https://github.com/test-summary/action) from 2.1 to 2.2.
- [Release notes](https://github.com/test-summary/action/releases)
- [Commits](62bc5c68de...fee35d7df2)

---
updated-dependencies:
- dependency-name: test-summary/action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Violet Hynes <violet.hynes@hashicorp.com>
2024-01-15 15:00:13 -05:00
miagilepner
1eeaee5efd VAULT-22645: Support secret sync in AddActivityToFragment (#24728)
* handle secret syncs in addactivitytofragment

* make secret syncs non-entity
2024-01-15 16:19:37 +01:00
Marc Boudreau
cd79712221 add checks for non base64 encoded message parameters in create and update custom message (#24848) 2024-01-15 10:06:23 -05:00
miagilepner
cd76e4fbc1 Fix mount counts in activity log (#24857)
* fix mount counts bug

* make disabled test CE only
2024-01-15 15:41:01 +01:00
Kuba Wieczorek
ea3f343715 [VAULT-22506] External tests for audit filtering (#24759)
Co-authored-by: Peter Wilson <peter.wilson@hashicorp.com>
2024-01-15 14:39:24 +00:00
Kuba Wieczorek
fc264784f1 Disable parallelism and increase a sleep time in TestOIDC_PeriodicFunc to make it less flaky (#24856) 2024-01-15 14:19:56 +00:00
dependabot[bot]
eb3cf7bdde Bump actions/github-script from 6.4.1 to 7.0.1 (#24832)
Bumps [actions/github-script](https://github.com/actions/github-script) from 6.4.1 to 7.0.1.
- [Release notes](https://github.com/actions/github-script/releases)
- [Commits](d7906e4ad0...60a0d83039)

---
updated-dependencies:
- dependency-name: actions/github-script
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-01-15 14:02:52 +00:00
dependabot[bot]
8e0851cfdd Bump actions/setup-node from 3.7.0 to 4.0.1 (#24833)
Bumps [actions/setup-node](https://github.com/actions/setup-node) from 3.7.0 to 4.0.1.
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](e33196f742...b39b52d121)

---
updated-dependencies:
- dependency-name: actions/setup-node
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-01-15 14:02:16 +00:00
miagilepner
caef5933ee VAULT-22642: Include secret syncs in activity log responses (#24710)
* refactor and include secret sync

* add secret sync tests

* changelog

* include secret syncs in clients

* pr comments

* add godocs
2024-01-15 11:40:47 +01:00
akshya96
bc9be554cb adding oss changes from ent (#24847) 2024-01-12 15:17:56 -08:00
Steven Clark
a6058c7b7b Copy the Connection reference within LogInput Clone() (#24843)
- As TestInteg_KMIP_Audit showed, the x509.Certificate's
   big.Int SerialNumber is mangled when we do a deep clone
   of the LogInput's Request TLSConnection object.
 - As the tls.ConnectionState does not have a Clone itself and
   we don't modify this field, it should be safe to just grab
   the existing reference into the cloned version.
2024-01-12 13:58:28 -05:00
Raymond Ho
f0d9cee1a7 update otel package to v1.21.0 (#24830) 2024-01-12 10:23:59 -08:00
Yoko Hyakuna
af3419940c [DOCS] Fix page heading (#24835)
* Fix the page header

* Fix the grammar pinted out by PR-1952
2024-01-12 08:03:46 -08:00
Peter Wilson
31baa89f75 audit: entry_formatter update to ensure no race detection issues (#24811)
* audit: entry_formatter update to ensure no race detection issues
* in progress with looking at a clone method for LogInput
* Tidy up LogInput Clone method
* less memory allocation
* fix hmac key clone
2024-01-12 14:47:29 +00:00
Andrei Burd
7049ce027e Update index.mdx (#24763) 2024-01-11 13:33:27 -08:00
Chelsea Shaw
e09fd3fbbe UI: Update flight icons (#24823) 2024-01-11 15:19:16 -06:00
Chelsea Shaw
a1c2e49eaa UI: User reset password test less flakey (#24826) 2024-01-11 15:18:28 -06:00
Violet Hynes
0a427b9fd3 Fix build failures sometimes showing as success when failures happened (#24825) 2024-01-11 20:42:23 +00:00
helenfufu
c6ba0f44ba update /sys/leader api docs (#24816) 2024-01-11 13:27:53 -06:00
Angel Garbarino
bde8b3b283 Prep for Ember data: misc #2 (#24791)
* consolidate policies tests, remove page  object for policies in favor of string selectors

* auth list test fix

* clean up pki-configuration test and only use error.errors if contents are string

* use mirage for version on landing page dashboard test

* changes not needed for upgrade but good clean up work.

* revert pki workflow changes

* remove unused test selector

* remove change to keep cleaner file count.

* add check on control groups

* remove space causing test problems

* use uuid for database backend name

---------

Co-authored-by: Chelsea Shaw <cshaw@hashicorp.com>
2024-01-11 10:55:26 -08:00
Steven Clark
6f5a7a9e8c Add WriteRaw to client api and new PKI test helper (#24818)
- This is to support the EST test cases within Vault Enterprise
2024-01-11 13:51:42 -05:00
Violet Hynes
9b457e0058 Run archive test logs always (#24820) 2024-01-11 18:33:55 +00:00