Commit Graph

16124 Commits

Author SHA1 Message Date
hc-github-team-secure-vault-core
f99420c92c backport of commit 82f998f071 (#18373)
Co-authored-by: Mike Palmiotto <mike.palmiotto@hashicorp.com>
2022-12-14 14:47:16 -05:00
hc-github-team-secure-vault-core
d4fa7208f6 backport of commit bc42a6cce8 (#18370)
Co-authored-by: Jason O'Donnell <2160810+jasonodonnell@users.noreply.github.com>
2022-12-14 17:37:11 +00:00
Chelsea Shaw
5225388dd6 Backport UI: Update database to connection name on role (#18350) (#18369)
* Update database to connection name on role

* Add changelog
2022-12-14 11:12:02 -06:00
hc-github-team-secure-vault-core
9ff14d9280 backport of commit 68915a0674 (#18362)
Co-authored-by: Mike Palmiotto <mike.palmiotto@hashicorp.com>
2022-12-14 11:26:14 -05:00
hc-github-team-secure-vault-core
46655c60f5 backport of commit cf0bf66f35 (#18346)
Co-authored-by: John-Michael Faircloth <fairclothjm@users.noreply.github.com>
2022-12-14 06:59:30 -06:00
hc-github-team-secure-vault-core
55b3d4e221 backport of commit 2c5a63bcea (#18352)
Co-authored-by: Jordan Reimer <zofskeez@gmail.com>
2022-12-13 23:48:40 +00:00
hc-github-team-secure-vault-core
74269e03d7 backport of commit 57017b626e (#18355)
Co-authored-by: Mike Palmiotto <mike.palmiotto@hashicorp.com>
2022-12-13 15:16:22 -08:00
hc-github-team-secure-vault-core
f67e66e074 backport of commit aeb3f1623c (#18341) 2022-12-13 12:56:18 -07:00
hc-github-team-secure-vault-core
4989f05292 backport of commit 81e0030538 (#18327)
Co-authored-by: Scott Miller <smiller@hashicorp.com>
2022-12-13 11:22:23 -06:00
hc-github-team-secure-vault-core
61faf5de3b backport of commit bfb5205eae (#18331) 2022-12-13 15:05:14 +00:00
Ryan Cragun
ccdb62d78e test: fix release testing workflows (#18322) (#18329)
* Use the correct runner
* Fix indentation

Signed-off-by: Ryan Cragun <me@ryan.ec>
2022-12-12 16:57:04 -07:00
hc-github-team-secure-vault-core
8139d039cc Backport of [QT-436] Pseudorandom artifact test scenarios into release/1.12.x (#18320)
* [QT-436] Pseudo random artifact test scenarios (#18056)

Introducing a new approach to testing Vault artifacts before merge
and after merge/notorization/signing. Rather than run a few static
scenarios across the artifacts, we now have the ability to run a
pseudo random sample of scenarios across many different build artifacts.

We've added 20 possible scenarios for the AMD64 and ARM64 binary
bundles, which we've broken into five test groups. On any given push to
a pull request branch, we will now choose a random test group and
execute its corresponding scenarios against the resulting build
artifacts. This gives us greater test coverage but lets us split the
verification across many different pull requests.

The post-merge release testing pipeline behaves in a similar fashion,
however, the artifacts that we use for testing have been notarized and
signed prior to testing. We've also reduce the number of groups so that
we run more scenarios after merge to a release branch.

We intend to take what we've learned building this in Github Actions and
roll it into an easier to use feature that is native to Enos. Until then,
we'll have to manually add scenarios to each matrix file and manually
number the test group. It's important to note that Github requires every
matrix to include at least one vector, so every artifact that is being
tested must include a single scenario in order for all workflows to pass
and thus satisfy branch merge requirements.

* Add support for different artifact types to enos-run
* Add support for different runner type to enos-run
* Add arm64 scenarios to build matrix
* Expand build matrices to include different variants
* Update Consul versions in Enos scenarios and matrices
* Refactor enos-run environment
* Add minimum version filtering support to enos-run. This allows us to
  automatically exclude scenarios that require a more recent version of
  Vault
* Add maximum version filtering support to enos-run. This allows us to
  automatically exclude scenarios that require an older version of
  Vault
* Fix Node 12 deprecation warnings
* Rename enos-verify-stable to enos-release-testing-oss
* Convert artifactory matrix into enos-release-testing-oss matrices
* Add all Vault editions to Enos scenario matrices
* Fix verify version with complex Vault edition metadata
* Rename the crt-builder to ci-helper
* Add more version helpers to ci-helper and Makefile
* Update CODEOWNERS for quality team
* Add support for filtering matrices by group and version constraints
* Add support for pseudo random test scenario execution

Backport

* Fix most `gofumpt` linter errors

Signed-off-by: Ryan Cragun <me@ryan.ec>
2022-12-12 15:07:16 -07:00
hc-github-team-secure-vault-core
e6825d5363 backport of commit 6795afe14d (#18314)
Co-authored-by: Steven Clark <steven.clark@hashicorp.com>
2022-12-12 18:35:26 +00:00
hc-github-team-secure-vault-core
8541865e19 backport of commit 22ffbb426e (#18289)
Co-authored-by: Meggie <meggie@hashicorp.com>
2022-12-09 11:58:53 -05:00
hc-github-team-secure-vault-core
11324eb281 backport of commit a0a785f84a (#18284)
Co-authored-by: Violet Hynes <violet.hynes@hashicorp.com>
2022-12-09 15:27:00 +00:00
hc-github-team-secure-vault-core
7a3e236047 backport of commit a8383f34a2 (#18275)
Co-authored-by: Josh Black <raskchanky@users.noreply.github.com>
2022-12-08 20:29:06 +00:00
hc-github-team-secure-vault-core
3fab35ce30 backport of commit ce74f4f1de (#18246) 2022-12-06 19:45:43 +00:00
Chris Capurso
463c3d8f0e Backport: Add read support to sys/loggers endpoints (#18161)
* add initial logging helper package

* VAULT-9427: Add read support to `sys/loggers` endpoints (#17979)

* add logger->log-level str func

* ensure SetLogLevelByName accounts for duplicates

* add read handlers for sys/loggers endpoints

* add changelog entry

* update docs

* ignore base logger

* fix docs formatting issue

* add ReadOperation support to TestSystemBackend_Loggers

* add more robust checks to TestSystemBackend_Loggers

* add more robust checks to TestSystemBackend_LoggersByName

* check for empty name in delete handler

* add logfile

* remove doc changes
2022-12-06 14:49:22 +00:00
hc-github-team-secure-vault-core
2d3fdcee0e backport of commit fdd0848216 (#18233)
Co-authored-by: Mike Palmiotto <mike.palmiotto@hashicorp.com>
2022-12-05 19:12:52 -05:00
Tom Proctor
275c1c2e29 Backport docs for retry_join_as_non_voter config option (#18195) 2022-12-05 19:02:14 +00:00
hc-github-team-secure-vault-core
d61aa720dc backport of commit 456ac93ce5 (#18219)
Co-authored-by: Alex Cahn <acahn@hashicorp.com>
2022-12-02 16:09:49 -05:00
hc-github-team-secure-vault-core
22bfe65240 backport of commit baaaff6756 (#18221)
Co-authored-by: Mike Palmiotto <mike.palmiotto@hashicorp.com>
2022-12-02 13:49:29 -05:00
hc-github-team-secure-vault-core
7d71099921 backport of commit bb99bfa3bd (#18217)
Co-authored-by: Ellie <ellie.sterner@hashicorp.com>
2022-12-02 09:21:17 -06:00
hc-github-team-secure-vault-core
a6a842a990 backport of commit c7a38e78c6 (#18206)
Co-authored-by: Ellie <ellie.sterner@hashicorp.com>
2022-12-01 15:47:01 -06:00
hc-github-team-secure-vault-core
7197b1558c backport of commit 06b4def568 (#18202)
Co-authored-by: Luis (LT) Carbonell <lt.carbonell@hashicorp.com>
2022-12-01 14:33:22 -06:00
hc-github-team-secure-vault-core
7ffd5811a0 backport of commit fb5e7c908d (#18196)
Co-authored-by: Steven Clark <steven.clark@hashicorp.com>
2022-12-01 19:44:30 +00:00
hc-github-team-secure-vault-core
aa16ecaa18 backport of commit 58aac5956b (#18193)
Co-authored-by: Tom Proctor <tomhjp@users.noreply.github.com>
2022-12-01 18:28:56 +00:00
hc-github-team-secure-vault-core
1b9fed9153 backport of commit b26888963f (#18187)
Co-authored-by: Steven Clark <steven.clark@hashicorp.com>
2022-12-01 16:54:22 +00:00
hc-github-team-secure-vault-core
335369d30f backport of commit 5cfb477049 (#17963)
Co-authored-by: Alexander Scheel <alex.scheel@hashicorp.com>
2022-12-01 15:54:28 +00:00
hc-github-team-secure-vault-core
f77ebf7abd backport of commit ffd0a15e11 (#18185)
Co-authored-by: Mike Palmiotto <mike.palmiotto@hashicorp.com>
2022-12-01 15:20:47 +00:00
hc-github-team-secure-vault-core
ec659232da backport of commit d6ed362cc3 (#18183)
Co-authored-by: Tom Proctor <tomhjp@users.noreply.github.com>
2022-12-01 11:09:44 +00:00
hc-github-team-secure-vault-core
1ebf8f1286 backport of commit d3665988c4 (#18181)
Co-authored-by: Chris Capurso <1036769+ccapurso@users.noreply.github.com>
2022-11-30 15:55:49 -08:00
hc-github-team-secure-vault-core
17e182232b backport of commit 6057da5466 (#18178)
Co-authored-by: Christopher Swenson <christopher.swenson@hashicorp.com>
2022-11-30 23:31:56 +00:00
Steven Clark
8611fe36dd Update go.mod to Vault SDK release 1.12.3 (#18179) 2022-11-30 22:38:36 +00:00
Steven Clark
2b200844a6 Update SDK to 1.12.3 (#18177) 2022-11-30 22:10:33 +00:00
hc-github-team-secure-vault-core
c8891219d9 backport of commit 1d7c5db671 (#18166)
Co-authored-by: Tom Proctor <tomhjp@users.noreply.github.com>
2022-11-30 18:23:17 +00:00
hc-github-team-secure-vault-core
0957874cad backport of commit 777474050b (#17615)
Co-authored-by: Scott Miller <smiller@hashicorp.com>
Co-authored-by: Steven Clark <steven.clark@hashicorp.com>
2022-11-30 09:23:02 -06:00
hc-github-team-secure-vault-core
40a3a94e3f backport of commit 1dc7a9645c (#18158)
Co-authored-by: Violet Hynes <violet.hynes@hashicorp.com>
2022-11-30 14:54:37 +00:00
hc-github-team-secure-vault-core
b5235169e2 backport of commit acbbdbb1ed (#18156) 2022-11-30 14:22:12 +00:00
hc-github-team-secure-vault-core
0e796d9064 backport of commit 54a7e81497 (#18133)
Co-authored-by: Tom Proctor <tomhjp@users.noreply.github.com>
2022-11-29 13:54:37 +00:00
Nick Cabatoff
835674bee5 VAULT-8631 Upgrade vault-plugin-secrets to v0.13.3, to enable synchronous KVV2 creation (#17406) (#18118) 2022-11-24 20:23:30 +00:00
Austin Gebauer
415e1fe311 Backport 1.12.x: secrets/gcp - Fixes duplicate service account key for rotate root on standby or secondary (#18111)
* Backport 1.12.x: secrets/gcp - Fixes duplicate service account key for rotate root on standby or secondary

* changelog
v1.12.2
2022-11-23 12:53:46 -08:00
hc-github-team-secure-vault-core
a8de422330 Fix .go-version path in Makefile (#18106)
Co-authored-by: Steve Clark <steven.clark@hashicorp.com>
2022-11-23 20:08:13 +00:00
hc-github-team-secure-vault-core
3cc6b6a6e3 Remove pinned builtin plugin versions from storage (#18051) (#18102)
* Removes _builtin_ versions from mount storage where it already exists
* Stops new builtin versions being put into storage on mount creation/tuning
* Stops the plugin catalog from returning a builtin plugin that has been overridden, so it more accurately reflects the plugins that are available to actually run
 Conflicts:
	vault/mount.go

Co-authored-by: Tom Proctor <tomhjp@users.noreply.github.com>
2022-11-23 19:17:39 +00:00
Steven Clark
f8786e57a5 Update 1.12.2 to Go 1.19.3 (#18088) 2022-11-23 12:40:01 -05:00
hc-github-team-secure-vault-core
fbbc3be803 Reduce number of places where go version is set (#17762) (#18099)
Reduce go version references to two: .go_version and @executors.yml.
2022-11-23 10:55:26 -05:00
Jason O'Donnell
4d962051e4 Backport 1.12: secrets/azure: add wal to cleanup role assignments (#18086)
* secrets/azure: add wal to cleanup role assignments

* changelog
2022-11-22 18:11:41 +00:00
hc-github-team-secure-vault-core
489e175532 backport of commit 7d9bc82bee (#18076)
Co-authored-by: Chris Capurso <1036769+ccapurso@users.noreply.github.com>
2022-11-22 17:30:26 +00:00
Chris Capurso
a266cbf00d add missing consul dataplane partial (#18078) 2022-11-22 15:45:56 +00:00
hc-github-team-secure-vault-core
ddcd4d02ad backport of commit 8b8c077dda (#17572)
Co-authored-by: Jose Diaz-Gonzalez <email@josediazgonzalez.com>
2022-11-22 15:18:44 +00:00