Commit Graph

20117 Commits

Author SHA1 Message Date
Angel Garbarino
1f982bf13a Restructure SSH and AWS configuration screens (#27831)
* setup the toggle to display mount configuration options

* whew.. getting there. aws only, borked for ssh

* another round, better than before

* masked things

* changelog

* fix broken oss test

* move to component

* handle ssh things and cleanup

* wip test coverage

* test coverage for the component

* copywrite header miss

* update no model error

* setup configuration aws acceptance tests

* update CONFIURABLE_SECRET_ENGINES

* acceptance tests for aws

* ssh configuration

* clean up

* remove comment

* move to confirm model before destructuring

* pr comments

* fix check for ssh config error

* add message check in api error test

* pr comments
2024-07-29 19:52:42 -06:00
Scott Miller
d75aee21b8 Improve trusted cert loading in Certificate Auth (#27902)
* Improve trusted cert loading in Certificate Auth

Currently, cert auth has a cache of certName->trusted certificate data.  This cache is updated lazily on login.  In highly concurrent situations, several logins
of the same cert or more likely, logins not specifying role name may happen simulataneously.  In the status quo, each results in going to storage, fetching the role data
(or all roles!), unmarshalling, and certificate parsing.

This change puts a lock matrix in front of the cache miss scenario, so only one of the logins will load and process the role data.  In addition, we treat
the absent role name specially, caching it separately so that it cannot be flushed by eviction on the role cache.

* changelog

* cleanup
2024-07-29 21:16:08 +00:00
claire bontempo
fe18e6ca87 UI: add subkey request to kv v2 adapter (#27804)
* add subkey request to ui

* WIP kv subkey display

* revert subkey changes to see view in ui

* finish subkey component

* remove reamining user facing changes

* update jsdoc

* add subtext depending on toggle

* finish tests

* organize adapter tests into modules

* add adapter tests

* woops, make beforeEach

* encode paths and add wrap secret test

* reword subkey component

* extract subkey path logic into util

* extract subkey path logic into util

* rename yielded subtext block
2024-07-29 13:12:40 -07:00
Will-Low
7d093f4e11 Add expected and default values for the vault.hashicorp.com/agent-pre-populate annotation (#27895)
Co-authored-by: Theron Voran <tvoran@users.noreply.github.com>
2024-07-29 11:51:14 -07:00
Ben Ash
f5963cfe00 Update VSO docs for v0.8.1 (#27898)
* Including missing Helm documentation.
* Add version tip for instant updates
2024-07-29 14:45:32 -04:00
Thy Ton
a2b4bb1b15 Fix mounts of external plugins that were registered before Vault v1.0.0 could not be tuned to use versioned plugins (#27881) 2024-07-29 10:01:26 -07:00
Violet Hynes
b689fc62f1 VAULT-29198 CE side changes for Proxy update forwarding (#27891)
* VAULT-29198 CE side changes for Proxy update forwarding

* VAULT-29198 changelog
2024-07-29 12:58:55 -04:00
VAL
ff46d3abc9 Add note requiring GOBIN to readme (#27886)
* Add note requiring GOBIN to readme

* simplify
2024-07-29 09:37:13 -07:00
Steven Clark
297a9831f1 Pin protoc-gen-go-grpc to 1.4.0 (#27892)
* Pin protoc-gen-go-grpc to 1.4.0

They introduced a replace statement within the go.mod file which
causes failures running go install protoc-gen-go-grpc@latest

Workaround for now is to pin to the previous version

See https://github.com/grpc/grpc-go/issues/7448

* Add missing v to version v1.4.0 instead of 1.4.0 within tools/tools.sh
2024-07-29 14:36:43 +00:00
kevin-loehfelm
7c13168d7d added delete role to website documentation (#27883)
* added delete role to website documentation

* added changlog
2024-07-26 15:18:45 -07:00
kpcraig
32fdae08d6 pass nil function for auth/aws when no externalID supplied (#27858) 2024-07-26 14:55:04 -04:00
Angel Garbarino
5787fa20f6 Prep for SSH and AWS configuration changes (#27869)
* move non user facing changes to another pr

* remove non-relevant test coverage

* address pr fixes

* Update mountable-secret-engines.js

* Update secrets-engine-mount-config.ts

* clean up

* put back console because of tests and use debug instead

* missed one

* blah fix
2024-07-26 10:47:33 -06:00
Kuba Wieczorek
5d172d5861 [VAULT-28666] Use the retry script to check release version for gotestsum in CI (#27878) 2024-07-26 16:41:01 +00:00
Kuba Wieczorek
7a4cf3d273 [VAULT-28666] Use the retry script to check release versions for external tools installed in CI (#27873) 2024-07-26 10:17:32 -04:00
JMGoldsmith
a27c133e37 [VAULT-28670] Updating the consul-template. (#27799)
* updating the consul-template.

* adding changelog

* actually adding changelog

* updating dependencies
2024-07-26 14:43:03 +02:00
Ellie
9274d74698 fix bug in which vault altered a canonical ID belonging to an alias, not a clone (#27824) 2024-07-26 07:13:11 -05:00
Marc Boudreau
a41c21b0f0 VAULT-28677: Fix dangling entity-aliases in MemDB after invalidation (#27750)
* properly cleanup aliases no longer in entity during invalidation

* test: verify proper alias removal from entity in invalidation

* add changelog entry

* document dangling entity-alias known issue

* improve entity-alias delete test

* fixup! document dangling entity-alias known issue

* use simpler approach to reconcile entity aliases in invalidation

* adjust comment to match previous code change

* add test covering local aliases

* pre-delete changed entity in invalidation
2024-07-25 15:36:42 -04:00
divyaac
4bde6b5e55 Remove distinct_entities and non_entity_tokens from ResponseCounts and update docs (#27849)
* Updated response counts

* Updated docs and removed references to derpecated fields in ResponseCounts
2024-07-25 10:29:23 -07:00
miagilepner
c1fcf6ad8e cleanup after handlequery changes (#27776) 2024-07-25 14:04:48 +02:00
Ellie
4f9d292155 Send warning and do not return error on group update if cluster is a PR secondary and RPC client is nil (#27779)
* warn if unable to persist group update to storage

* add testing helpers

* Update vault/identity_store_util.go

Co-authored-by: Paul Banks <pbanks@hashicorp.com>

* separate ifs

---------

Co-authored-by: Paul Banks <pbanks@hashicorp.com>
2024-07-24 17:16:14 -05:00
Peter Wilson
6ec5fa00e1 Remove multi-errors and update expected error msg in tests (#27861) 2024-07-24 23:07:37 +01:00
Peter Wilson
69c0433f9f Audit: optional logger for sinks will log on errors when context is done (#27859)
* Added optional logger for sink nodes (supplied by backends) will log on errors when context is also done

* changelog
2024-07-24 22:57:15 +01:00
Peter Wilson
46d2f41000 Use the core logger for audit enable errors (not the system backend) (#27860) 2024-07-24 22:56:59 +01:00
Yoko Hyakuna
f2ce14b4b2 [Docs] Minor editorial fixes - "token capabilities" (#27851)
* Minor editorial fixes

* Fix a typo
2024-07-24 09:00:53 -07:00
Chris Capurso
a28464b860 Add non-root access with filtering support to activity export API (#27846)
* VAULT-28577: change CSV MIME type to text/csv

* VAULT-28578: require sudo for export API

* add validation and associated error handling

* change export API default to 204 if no data returned

* VAULT-28579: allow export API in non-root namespace, add filtering support

* update test fixtures to reflect filtering changes

* TestActivityLog_Export moved to ENT-only test

* add test to verify sudo access

* add changelog entry
2024-07-24 09:21:52 -04:00
Violet Hynes
ec399e6226 VAULT-27563 CE changes (#27847)
* VAULT-27563 CE changes

* Missed push
2024-07-24 09:11:59 -04:00
Kuba Wieczorek
920c08966c [VAULT-28666] Enable the --clobber flag on GitHub CLI release downloads in CI to avoid errors when retrying (#27852) 2024-07-24 12:24:30 +01:00
claire bontempo
08b5d87965 UI: Move OIDC key header out of form component (#27848)
* move pageheader to route template

* remove title assertions because no longer reliant on isNew logic

* change @model to this.model

* remove test selectors

* add keys base breadcrumb

* update assertion count
2024-07-23 15:21:05 -07:00
divyaac
b32231a9eb Deprecate distinct_entities and nont_entity_tokens (#27830)
* OSS Changes

* Added changelog

* Fix build errors
2024-07-23 20:57:38 +00:00
Kuba Wieczorek
74d15e3d50 [VAULT-28666] Remove the errexit option from the retry script and add increasing wait on failure (up to 5 seconds and 5 retries) (#27842)
Co-authored-by: VAL <val@hashicorp.com>
2024-07-23 17:58:37 +00:00
claire bontempo
575a632073 UI: upgrade HDS to 4.6.0 (#27843)
* fresh yarn lock

* upgrade hds to 4.6.0
2024-07-23 09:10:05 -07:00
Ben Ash
6a6a35a2f0 Bump VSO versions to 0.8.0 (#27835) 2024-07-22 17:03:17 -04:00
Violet Hynes
dbecbcec18 VAULT-27384 Fix faulty assignments and unchecked errors (#27810)
* VAULT-27384 Fix faulty assignments and unchecked errors

* Another missed error

* Small refactor
2024-07-22 16:53:02 -04:00
Mike Palmiotto
f248262466 CE no-op CensusManager (#27827)
This PR introduces a no-op CensusManager in CE in an effort to simplify
overall maintenance.

Resolves: VAULT-27562
Enterprise PR: hashicorp/vault-enterprise#6231
2024-07-22 16:52:45 -04:00
dependabot[bot]
c37985bac9 Bump google.golang.org/grpc from 1.64.0 to 1.64.1 (#27737)
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.64.0 to 1.64.1.
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](https://github.com/grpc/grpc-go/compare/v1.64.0...v1.64.1)

---
updated-dependencies:
- dependency-name: google.golang.org/grpc
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Violet Hynes <violet.hynes@hashicorp.com>
2024-07-22 11:56:25 -04:00
Ben Ash
137bba2b70 VSO: update docs for VaultAuthGlobals (#27797)
---------

Co-authored-by: Theron Voran <tvoran@users.noreply.github.com>
2024-07-22 11:03:33 -04:00
Ben Ash
fb5000c379 Update VSO docs for auto CRD upgrade behaviour (#27763) 2024-07-22 11:02:23 -04:00
Theron Voran
7235c269b7 docs/vso: instant updates (#27668) 2024-07-22 11:01:52 -04:00
miagilepner
4b8ecf5e05 VAULT-28329: Fix months activity log counts when querying for a namespace (#27790)
* start implementation and testing

* changelog

* switch changelog description to change
2024-07-22 09:01:14 +00:00
Theron Voran
6d4cb5e49a Docs update for vault helm v0.28.1 release (#27766) 2024-07-19 17:12:07 -07:00
Yoko Hyakuna
f1aa3bd7ca [Docs] Add a warning about namespace info for HVD (#27812)
* Add a warning about namespace info for HVD

* Minor edit
2024-07-19 13:04:51 -07:00
Johnny Fang
7ca16627f5 Fixing typo "auth_auth" should be "auto_auth" (#27758)
Co-authored-by: Yoko Hyakuna <yoko@hashicorp.com>
2024-07-19 12:12:02 -07:00
Angel Garbarino
d5e836b143 Title case all static breadcrumbs (#27808)
* title case all static breadcrumb labels

* test fixes

* add missing model
2024-07-19 11:57:53 -06:00
Altabay-HashiCorp
7d6986cc84 Docs: Add a Priority matching policy example using Namespaces (#27792)
* Policy priority NS example

* Update website/content/docs/concepts/policies.mdx

Modification after review

Co-authored-by: Yoko Hyakuna <yoko@hashicorp.com>

---------

Co-authored-by: Yoko Hyakuna <yoko@hashicorp.com>
2024-07-19 09:21:16 -07:00
John-Michael Faircloth
d6a588b8d2 db: refactor postgres test helpers (#27811)
* db: refactor postgres test helpers

* fix references to refactored test helper

* fix references to refactored test helper

* fix failing test
2024-07-19 09:47:34 -05:00
Peter Wilson
39b99b2e05 Audit: log 'warnings' from eventlogger even if audit is deemed a success (#27809)
* make sure we still log underyling pipeline errors even if audit is deemed a success

* changelog
2024-07-19 11:12:51 +01:00
Peter Wilson
f959f46dd0 name audit logger for standardUnsealStrategy's unseal (#27806) 2024-07-18 17:29:59 +01:00
John-Michael Faircloth
3f90e9ac38 docs: add missing rotation_statements to oracle docs (#27802) 2024-07-17 18:14:49 -04:00
Chelsea Shaw
050a90b2ab UI: Update date-picker UX in Client Counts (#27796)
* Create date-range component with tests

* update selectors and callback behavior

* update cc tests & selectors

* cleanup

* RIP calendar-widget and date-dropdown -- you were good components

* reset on close

* Add changelog

* use parseApiTimestamp

* fix test

* cleanup

* make date-range typescript, update behavior

* add words

* minor styling

* fix test
2024-07-17 11:48:44 -05:00
John-Michael Faircloth
d444a32f8c docs: add missing rotation_statements to mssql api docs (#27800) 2024-07-17 10:30:00 -05:00