scottk/vault
1
0
Fork 0
mirror of https://github.com/optim-enterprises-bv/vault.git synced 2025-10-29 09:42:25 +00:00
Code Issues Packages Projects Releases Wiki Activity
20,818 Commits 2,630 Branches 341 Tags
dd8a0d57a8ef4a0ecda3f3d80b39aed488e519fd
Commit Graph

20818 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Shannon Roberts (Beagin)
0d3a82adf4 [VAULT-19467] UI Breadcrumb Title Case (#29206) 
* [VAULT-19467] Vault UI Breadcrumb Title Case

* should use Title Case

* update changelog

* rename changelog

* update tests

* more test updates

* update tests

---------

Co-authored-by: Tony Wittinger <anwittin@users.noreply.github.com>
 2024-12-20 12:47:34 -06:00
Shannon Roberts (Beagin)
e349c99891 [VAULT-33146] Update tutorial link for creating a policy (#29226) 
* [VAULT-33146] Update vault tutorial link

* add changelog

* update changelog

* remove changelog

---------

Co-authored-by: Tony Wittinger <anwittin@users.noreply.github.com>
 2024-12-20 12:47:02 -06:00
Evan Moncuso
70325d2dde update changelog for GH-28670 (#29240) 2024-12-20 18:27:59 +00:00
Rachel Culpepper
796a565f4c fix key type for hybrid key creation tests (#29135) 2024-12-20 10:35:51 -06:00
Sarah Chavis
8f6e95f1a3 [DOCS] SEO updates for config docs (#29242) 
* seo updates for config docs

* fix content errors

* Make KMS title consistent with other stanza titles
 2024-12-19 19:21:33 -05:00
Ryan Cragun
f7ab5ca73d go: don't download pipeline modules when caching build modules (#29224) 
Various different CI jobs need Go modules in order to build or test
Vault. To speed this up in CI we cache them in Github Actions.
The caching requires downloading all modules first in order to upload
them to the actions cache, which is performed by calling the
`go-mod-download` Make target. This target will iterate over the
directory tree and download Go modules in all directories that include
a `go.mod` file.

There are two small problems with this approach that we resolved with
this PR:
* Our `go-mod-download` target would download modules for all
  `go.mod`'s present in the directory tree, regardless of whether or not
  they are required to build or test Vault. Only downloading those
  required results in slightly smaller caches.
* `tools/pipeline` is intentionally a separate Go module so as to not
  require its modules in order to build Vault, however, our
  `go-mod-download` downloading all modules requires the workflow
  environment to include auth credentials for internal modules. If a
  community contributed PRs modifies a `go.mod`, which in turn requires
  a new cache, the PR will always fail because it cannot download
  modules that require secrets.

Now we avoid installing our `tools/pipeline` modules when generating our
module cache which should allow community contributed PRs to execute
build and Go tests, while skipping enos workflows which already required
secrets and were thus skipped.

Signed-off-by: Ryan Cragun <me@ryan.ec>
 2024-12-19 09:17:51 -07:00
Yoko Hyakuna
32ba53f3c4 [DOCS] Update the PKI secrets engine docs title & description (#29136) 
* Update the PKI secrets engine docs title & description

* Update website/content/docs/secrets/pki/index.mdx

Co-authored-by: Jonathan Frappier <92055993+jonathanfrappier@users.noreply.github.com>

* Incorporate the review feedback

---------

Co-authored-by: Jonathan Frappier <92055993+jonathanfrappier@users.noreply.github.com>
 2024-12-19 14:36:16 +01:00
Yoko Hyakuna
f975259267 [DOCS] Update the title & description for SEO improvement (#29115) 
* Update the title & description for SEO improvement

* Minor updates for style consistency

* Revert back the change

* Update website/content/docs/secrets/aws.mdx

Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>

---------

Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>
 2024-12-18 15:37:38 -08:00
Yoko Hyakuna
8aa6fa3a90 [DOCS] Update the page description for SEO improvement #2 (#29116) 
* Update the page description for SEO improvement

* Update the description for SEO improvement

* Update the description

* Update website/content/docs/secrets/transform/ff3-tweak-details.mdx

Co-authored-by: Jonathan Frappier <92055993+jonathanfrappier@users.noreply.github.com>

* Fixing a typo

* Incorporate review feedback

---------

Co-authored-by: Jonathan Frappier <92055993+jonathanfrappier@users.noreply.github.com>
 2024-12-18 17:35:57 -06:00
Angel Garbarino
2631ae67d4 Allow Configuration of Azure Secret Engine, including WIF for enterprise users (#29047) 
* transfer over all changes from original pr

* changelog

* add serialize catch for no empty string environment

* move ttl format logic to parent route

* Update 29047.txt

* clean up some comments

* Update changelog/29047.txt

Co-authored-by: claire bontempo <68122737+hellobontempo@users.noreply.github.com>

* Update changelog/29047.txt

Co-authored-by: claire bontempo <68122737+hellobontempo@users.noreply.github.com>

* Update ui/app/components/secret-engine/configure-azure.hbs

Co-authored-by: claire bontempo <68122737+hellobontempo@users.noreply.github.com>

* first round of addressing pr comments, holding off on the issue save flow for error messaging to keep separate

* Update CODEOWNERS

merge issue

* small clean up tasks

* updates

* test coverage

* small cleanup

* small clean up

* clean up

* clean up getters on model

---------

Co-authored-by: claire bontempo <68122737+hellobontempo@users.noreply.github.com>
 2024-12-18 16:28:07 -07:00
Tony Wittinger
fc89097c38 Update CHANGELOG.md (#29227) 
* Update CHANGELOG.md

* Update CHANGELOG.md

Co-authored-by: Meggie <meggie@hashicorp.com>

* Update CHANGELOG.md

good catch

Co-authored-by: Meggie <meggie@hashicorp.com>

---------

Co-authored-by: Meggie <meggie@hashicorp.com>
 2024-12-18 14:31:51 -08:00
Jonathan Frappier
0733a31eea Add ops quick start, update nav (#29220) 
* Add ops quick start, update nav

* Update website/content/docs/get-started/operations-qs.mdx

Co-authored-by: Yoko Hyakuna <yoko@hashicorp.com>

* Update website/content/docs/get-started/operations-qs.mdx

Co-authored-by: Yoko Hyakuna <yoko@hashicorp.com>

* Update website/content/docs/get-started/operations-qs.mdx

Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>

* Update website/content/docs/get-started/operations-qs.mdx

Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>

* Update website/content/docs/get-started/operations-qs.mdx

Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>

* Update website/content/docs/get-started/operations-qs.mdx

Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>

* Update website/content/docs/get-started/operations-qs.mdx

Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>

* Update website/content/docs/get-started/operations-qs.mdx

Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>

* Update website/content/docs/get-started/operations-qs.mdx

Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>

* Update website/content/docs/get-started/operations-qs.mdx

Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>

* Update website/content/docs/get-started/operations-qs.mdx

Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>

* Update website/content/docs/get-started/operations-qs.mdx

Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>

* Update website/content/docs/get-started/operations-qs.mdx

Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>

* Update website/content/docs/get-started/operations-qs.mdx

Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>

* Update website/content/docs/get-started/operations-qs.mdx

Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>

* Update website/content/docs/get-started/operations-qs.mdx

Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>

* Update website/content/docs/get-started/operations-qs.mdx

Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>

* Update website/content/docs/get-started/operations-qs.mdx

Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>

* Update website/content/docs/get-started/operations-qs.mdx

Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>

* Update website/content/docs/get-started/operations-qs.mdx

Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>

* Update website/content/docs/get-started/operations-qs.mdx

Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>

* Update website/content/docs/get-started/operations-qs.mdx

Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>

* Update website/content/docs/get-started/operations-qs.mdx

Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>

* Update website/content/docs/get-started/operations-qs.mdx

Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>

* Update website/content/docs/get-started/operations-qs.mdx

Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>

* Update website/content/docs/get-started/operations-qs.mdx

Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>

* Update website/content/docs/get-started/operations-qs.mdx

Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>

* Update website/content/docs/get-started/operations-qs.mdx

Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>

* Update website/content/docs/get-started/operations-qs.mdx

Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>

* Update website/content/docs/get-started/operations-qs.mdx

Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>

* Update website/content/docs/get-started/operations-qs.mdx

Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>

* Update website/content/docs/get-started/operations-qs.mdx

Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>

* Update website/content/docs/get-started/operations-qs.mdx

Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>

* Update website/content/docs/get-started/operations-qs.mdx

Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>

* Update website/content/docs/get-started/operations-qs.mdx

Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>

* Update website/content/docs/get-started/operations-qs.mdx

Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>

* Updates

---------

Co-authored-by: Yoko Hyakuna <yoko@hashicorp.com>
Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>
 2024-12-18 14:07:52 -05:00
claire bontempo
13e4d0f230 UI: Update PostgreSQL database params (#29200) 
* add testing before model changes

* add enterprise self_managed attr, update tests

* add postgres params

* add changelog

* update test

* cleanup filter function

* fix nits
 2024-12-18 12:21:18 -06:00
Yoko Hyakuna
96f32adb00 Update the page title/description (#29218) 2024-12-17 11:45:02 -08:00
tschiemann
78b5b1a6ae change order in first example (#29194) 
-path must bevor auth method, otherwise an error is thrown

 "Command flags must be provided before positional arguments. The following arguments will not be parsed as flags: [-path=my-auth]"

Co-authored-by: Yoko Hyakuna <yoko@hashicorp.com>
 2024-12-17 11:07:02 -08:00
Sarah Chavis
3da3bdbdd7 Add EDU as approvers for more granular targets (#29124) 2024-12-17 18:12:40 +00:00
claire bontempo
2984e0f4b8 add ui team to oidc and jwt codeowners (#29212) 2024-12-17 17:26:06 +00:00
John-Michael Faircloth
f5191bd06e db: fix skip-import-rotation/rootless integration (#29202) 
* db: fix skip-import-rotation/rootless integration

* prevent setting both password and self_managed_password

* move func call and add comment
 2024-12-17 11:17:02 -06:00
miagilepner
4b4962947d Do not error during retry join if the node is removed (#29210) 2024-12-17 18:14:11 +01:00
claire bontempo
741721ad0e UI: Fix MFA + SSO login workflow (#28873) 
* =passback mfa_requirement for oidc login methods

* =pass SAML mfa requirement

* add comments

* add acceptance tests

* add helper

* update callback args for auth jwt

* add changelog

* update changelog

* is this line necessary?

* fetch token data for display name, this commit can be undone when BE fixes VAULT-32462

* change error handling, add comments

* update capitalization

* revert capitalization

* reword changelog

* clarify comments

* Update changelog/28873.txt
 2024-12-17 11:06:20 -06:00
Yoko Hyakuna
ed4664005b [DOCS] Fix style inconsistency (#29199) 
* Fix style inconsistency

* Fix typos

* Update website/content/docs/platform/k8s/vso/secret-transformation.mdx

Co-authored-by: Jonathan Frappier <92055993+jonathanfrappier@users.noreply.github.com>

* Update website/content/docs/platform/k8s/helm/terraform.mdx

Co-authored-by: Theron Voran <tvoran@users.noreply.github.com>

* Update website/content/docs/platform/k8s/injector/annotations.mdx

Co-authored-by: Theron Voran <tvoran@users.noreply.github.com>

---------

Co-authored-by: Jonathan Frappier <92055993+jonathanfrappier@users.noreply.github.com>
Co-authored-by: Theron Voran <tvoran@users.noreply.github.com>
 2024-12-17 08:01:12 -08:00
Yoko Hyakuna
1390176427 [DOCS] Match the page_title with H1 header (#29204) 
* Match the page_title with H1 header

* Fix typos: rote --> rotate
 2024-12-16 17:31:29 -08:00
akshya96
904734424a Update docs to reflect that activity log cannot be disabled on Vault Enterprise (#29144) 
* add docs changes for enabled field

* remove extra space

* updating docs
 2024-12-16 17:06:56 -08:00
divyaac
1fab64e9c6 OSS-Changes Patch (#29193) 2024-12-16 13:39:07 -08:00
F Team
18d21928b2 Update server command - log-file parameter - folder value (#29061) 
Co-authored-by: Ken Keller <104874953+mister-ken@users.noreply.github.com>
 2024-12-16 16:01:50 -03:00
Mike Palmiotto
bf1741e123 make fmt (#29196) 2024-12-16 13:07:28 -05:00
Yoko Hyakuna
732837b082 [DOCS] Match the page_title and H1 header (#29192) 
* Match the page_title and H1 header

* Update website/content/docs/secrets/databases/index.mdx

Co-authored-by: Brian Shumate <brianshumate@users.noreply.github.com>

---------

Co-authored-by: Brian Shumate <brianshumate@users.noreply.github.com>
 2024-12-16 08:52:59 -08:00
Mike Palmiotto
84dac8486a identity: Introduce ConflictResolver interface (#29187) 
This PR introduces a new interface for conflict resolution of duplicate
Identity artifacts. The initial implementation just reorganizes the code
to use the interface with no behavior change.

The interface is intended to provide a minimal touchpoint for
implementing new conflict resolution behavior. Since those changes will
also introduce significant testcases, the aim here is to merge the new
interface and ensure the current code works as intended (according to
existing tests).
 2024-12-16 15:46:36 +00:00
Adam Rowan
2076decac0 Update interoperability-matrix.mdx (#29189) 
Updating to include new Blockdaemon integration
 2024-12-13 15:48:44 -05:00
James
e43fe23e91 Docs/secrets sync ssrf private endpoints (#28746) 
* docs: add Secrets Sync SSRF protection breaking change to 1.17 upgrade guide

The Secrets Sync feature in 1.17.3 introduced SSRF protection that blocks private IP ranges, affecting users accessing secret stores through private endpoints. This adds documentation about the change and available options.

* renamed issue

* referenced secret sync ssrf known issue

* re-ordered secret sync known issue in page

* Hide copy-to-clipboard button on the output example codeblock

---------

Co-authored-by: yhyakuna <yoko@hashicorp.com>
 2024-12-13 07:50:24 -08:00
Ken Keller
23a663fcf9 mfa login/totp (#29094) 
* initial commit

* update mfa/totp
 2024-12-13 09:38:09 -06:00
Brian Shumate
b4e3d3af31 Docs: add Tune server performance documentation (#29149) 
* filename extension

* Update website/content/docs/concepts/tune-server-performance.mdx

Co-authored-by: Ken Keller <104874953+mister-ken@users.noreply.github.com>

* Update website/content/docs/concepts/tune-server-performance.mdx

Co-authored-by: Ken Keller <104874953+mister-ken@users.noreply.github.com>

---------

Co-authored-by: Ken Keller <104874953+mister-ken@users.noreply.github.com>
 2024-12-13 08:34:05 -05:00
vinay-gopalan
a06bdc16ab update changelogs for static role role rotation updates (#29174) 2024-12-12 19:12:06 +00:00
Yoko Hyakuna
c4be16c8f7 [DOCS] Update the page description for SEO improvement #4 (#29166) 
* Update the page description to improve SEO

* Minor updates

* Update setup.mdx

* Update setup.mdx

* Update website/content/docs/secrets/ad/migration-guide.mdx

Co-authored-by: Jonathan Frappier <92055993+jonathanfrappier@users.noreply.github.com>

* Update website/content/docs/secrets/ad/index.mdx

Co-authored-by: Jonathan Frappier <92055993+jonathanfrappier@users.noreply.github.com>

* Update website/content/docs/secrets/ad/index.mdx

Co-authored-by: Jonathan Frappier <92055993+jonathanfrappier@users.noreply.github.com>

---------

Co-authored-by: Jonathan Frappier <92055993+jonathanfrappier@users.noreply.github.com>
 2024-12-12 09:01:31 -08:00
mickael-hc
11708f14d6 bump golang.org/x/crypto (#29153) 
mitigates CVE-2024-45337 which does not affect Vault but will help reduce scanner noise
 2024-12-12 11:23:37 -05:00
miagilepner
e8ccd6e3c9 VAULT-31756: Include removed and HA health in sys/health docs (#29017) 
* add HA health and removed to the sys/health docs

* revert accidental edit
 2024-12-12 17:10:27 +01:00
kpcraig
958fa8dd3a update changelog for okta dependency update (#29161) 2024-12-12 10:13:12 -05:00
Ben Ash
250c83d905 vso/docs: restore upgrade instructions (#29159) 2024-12-12 09:57:34 -05:00
Thy Ton
d956574ffc remove changelog #29024 (#29162) 2024-12-11 21:09:42 -08:00
John-Michael Faircloth
d411a44c18 secrets/db: enable skip auto import rotation of static roles (#29093) 
* secrets/db: enable skip auto import rotation of static roles

* fix panic due to empty role name causing role to not be stored

* fix role upgrade test

* Apply suggestions from code review

Co-authored-by: vinay-gopalan <86625824+vinay-gopalan@users.noreply.github.com>
Co-authored-by: kpcraig <3031348+kpcraig@users.noreply.github.com>

* use password in favor of self_managed_password

* add deprecated to self_managed_password field

* fix bug with allowing updates to password

---------

Co-authored-by: vinay-gopalan <86625824+vinay-gopalan@users.noreply.github.com>
Co-authored-by: kpcraig <3031348+kpcraig@users.noreply.github.com>
 2024-12-12 01:39:09 +00:00
Michael Blaum
ca203c21d0 use const for in relation to vault eventing metadata (#29130) 
* use const for  in relation to vault eventing metadata

* update comments

* fix comment lengths
 2024-12-11 17:34:38 -05:00
claire bontempo
4714d08799 clarify fix to apply to all databases (#29156) 2024-12-11 21:36:48 +00:00
divyaac
46c69d739d OSS Changes Patch (#29154) 2024-12-11 21:07:06 +00:00
Ben Ash
1b8c1dc919 Update VSO docs for v0.9.1 (#29151) 2024-12-11 16:01:43 -05:00
Violet Hynes
bf6ac1a7d9 Run benchmark only on main (and rename the f ile (#29142) 2024-12-11 10:18:17 -08:00
divyaac
af6d983404 Added LocalMount field to Export API (#29145) 
* OSS Changes Patch

* Added changelog
 2024-12-11 08:58:12 -08:00
Steven Clark
6a3f828e16 Update changelog entry linking PKI considerations page for more info (#29147) 2024-12-11 10:14:45 -05:00
miagilepner
9bde015070 VAULT-31758: Store when a node is removed in the raft stable store (#29090) 
* implementation and test

* changelog

* verify servers are healthy before removing
 2024-12-11 12:31:59 +01:00
Angel Garbarino
2b3f517076 Add Azure configuration details view (#29071) 
* configuration details only changes

* azure configuration acceptance test

* clean up

* change attrs to display attrs and reuse formFields

* missed some

* clean up

* Update ui/app/helpers/mountable-secret-engines.js

Co-authored-by: claire bontempo <68122737+hellobontempo@users.noreply.github.com>

* remove extra conditional

* fix test for oss runs

* clean up the logic for checking if the model has been configured

* remove formatTtl

* fix broken conditional

* address pr comments

* clean up clean up everybody lets clean up

---------

Co-authored-by: claire bontempo <68122737+hellobontempo@users.noreply.github.com>
 2024-12-10 16:21:55 -07:00
helenfufu
c27a54a99c add vault build date to system view plugin env VAULT-32676 (#29082) 
---------

Co-authored-by: Thy Ton <maithytonn@gmail.com>
 2024-12-10 14:30:21 -08:00