* setup the toggle to display mount configuration options
* whew.. getting there. aws only, borked for ssh
* another round, better than before
* masked things
* changelog
* fix broken oss test
* move to component
* handle ssh things and cleanup
* wip test coverage
* test coverage for the component
* copywrite header miss
* update no model error
* setup configuration aws acceptance tests
* update CONFIURABLE_SECRET_ENGINES
* acceptance tests for aws
* ssh configuration
* clean up
* remove comment
* move to confirm model before destructuring
* pr comments
* fix check for ssh config error
* add message check in api error test
* pr comments
* Improve trusted cert loading in Certificate Auth
Currently, cert auth has a cache of certName->trusted certificate data. This cache is updated lazily on login. In highly concurrent situations, several logins
of the same cert or more likely, logins not specifying role name may happen simulataneously. In the status quo, each results in going to storage, fetching the role data
(or all roles!), unmarshalling, and certificate parsing.
This change puts a lock matrix in front of the cache miss scenario, so only one of the logins will load and process the role data. In addition, we treat
the absent role name specially, caching it separately so that it cannot be flushed by eviction on the role cache.
* changelog
* cleanup
* Pin protoc-gen-go-grpc to 1.4.0
They introduced a replace statement within the go.mod file which
causes failures running go install protoc-gen-go-grpc@latest
Workaround for now is to pin to the previous version
See https://github.com/grpc/grpc-go/issues/7448
* Add missing v to version v1.4.0 instead of 1.4.0 within tools/tools.sh
* move non user facing changes to another pr
* remove non-relevant test coverage
* address pr fixes
* Update mountable-secret-engines.js
* Update secrets-engine-mount-config.ts
* clean up
* put back console because of tests and use debug instead
* missed one
* blah fix
* properly cleanup aliases no longer in entity during invalidation
* test: verify proper alias removal from entity in invalidation
* add changelog entry
* document dangling entity-alias known issue
* improve entity-alias delete test
* fixup! document dangling entity-alias known issue
* use simpler approach to reconcile entity aliases in invalidation
* adjust comment to match previous code change
* add test covering local aliases
* pre-delete changed entity in invalidation
* warn if unable to persist group update to storage
* add testing helpers
* Update vault/identity_store_util.go
Co-authored-by: Paul Banks <pbanks@hashicorp.com>
* separate ifs
---------
Co-authored-by: Paul Banks <pbanks@hashicorp.com>
* VAULT-28577: change CSV MIME type to text/csv
* VAULT-28578: require sudo for export API
* add validation and associated error handling
* change export API default to 204 if no data returned
* VAULT-28579: allow export API in non-root namespace, add filtering support
* update test fixtures to reflect filtering changes
* TestActivityLog_Export moved to ENT-only test
* add test to verify sudo access
* add changelog entry
* move pageheader to route template
* remove title assertions because no longer reliant on isNew logic
* change @model to this.model
* remove test selectors
* add keys base breadcrumb
* update assertion count
This PR introduces a no-op CensusManager in CE in an effort to simplify
overall maintenance.
Resolves: VAULT-27562
Enterprise PR: hashicorp/vault-enterprise#6231
* Create date-range component with tests
* update selectors and callback behavior
* update cc tests & selectors
* cleanup
* RIP calendar-widget and date-dropdown -- you were good components
* reset on close
* Add changelog
* use parseApiTimestamp
* fix test
* cleanup
* make date-range typescript, update behavior
* add words
* minor styling
* fix test