21651 Commits

Author SHA1 Message Date
Vinay Gopalan
eb31d8360b add logging and update build.yml 2025-08-20 19:34:21 -07:00
Vault Automation
5d264c29e5
pipeline(backport): use --strategy-option=theirs (#8767) (#8780)
Signed-off-by: Ryan Cragun <me@ryan.ec>
Co-authored-by: Ryan Cragun <me@ryan.ec>
2025-08-20 23:25:07 +00:00
Vault Automation
c2c89dff84
changelog: add hash link to changes that originate from enterprise (#8745) (#8775)
Signed-off-by: Ryan Cragun <me@ryan.ec>
Co-authored-by: Ryan Cragun <me@ryan.ec>
2025-08-20 17:03:19 -06:00
Vault Automation
ffa18b3388
enos(sample): don't double sample (#8752) (#8770)
* enos: remove double sample observe
* ci(build): fix notification on artifacts build failure

Signed-off-by: Ryan Cragun <me@ryan.ec>
Co-authored-by: Ryan Cragun <me@ryan.ec>
2025-08-20 17:01:03 -06:00
Vault Automation
18d77badd8
Fix token creation in a namespace (#8461) (#8747)
* fix and test for token creation in namespace

* add changelog

* add nil check

* change existing test to work with change

* fix imports

* add error and more specificity in changelog

Co-authored-by: Rachel Culpepper <84159930+rculpepper@users.noreply.github.com>
2025-08-20 17:38:49 -04:00
Vault Automation
ae0e5e160f
[VAULT-38601] Modify response to MFA enforced requests to enable TOTP self-enrollment (#8723) (#8746)
Co-authored-by: Kuba Wieczorek <kuba.wieczorek@hashicorp.com>
2025-08-20 20:22:00 +00:00
Vault Automation
3594d6d6b1
[VAULT-38605] Add self-enrollment option to the TOTP Login MFA method (#8711) (#8731)
Co-authored-by: Kuba Wieczorek <kuba.wieczorek@hashicorp.com>
2025-08-20 20:18:54 +01:00
Vault Automation
8a9c306960
UI: Create version card (#8710) (#8744)
* setup version card

* folder restructure

* Adding todos, removing test

Co-authored-by: Dan Rivera <dan.rivera@hashicorp.com>
2025-08-20 18:06:44 +00:00
Vault Automation
711ed1a740
Add support for AES-CBC to transit (#8367) (#8741)
* add key types and encryption for cbc

* add decryption

* start adding tests

* add tests for policy functions

* add convergent case

* add enterprise check and key creation test cases

* fix key generation and add import/export

* add tests and fixes

* add changelog

* linter

* refactor policy functions and fix IV

* add ce change

* fix function calls

* fix factories in function call

* fix IV test case

* test fixes

* add cbc keys to read

* change iv

* fix merge errors

* make fmt

* change error name and add iv error

* fix tests

Co-authored-by: Rachel Culpepper <84159930+rculpepper@users.noreply.github.com>
2025-08-20 17:39:02 +00:00
Vault Automation
11458aa035
actions(metadata): fix metadata version for ce (#8713) (#8714)
Signed-off-by: Ryan Cragun <me@ryan.ec>
Co-authored-by: Ryan Cragun <me@ryan.ec>
2025-08-20 00:05:56 +00:00
Vault Automation
9a73034335
UI: Creating Metadata card for configuration page (#8679) (#8709)
* card setup

* updating to pass in vals

* remove test usage

Co-authored-by: Dan Rivera <dan.rivera@hashicorp.com>
2025-08-19 17:21:41 -04:00
Ryan Cragun
6d355aa043
remove file that slipped in during the backport but before the changed file checks (#8706)
Signed-off-by: Ryan Cragun <me@ryan.ec>
2025-08-19 13:50:56 -06:00
Ryan Cragun
812a240c66
Backport VAULT-34830: enable the new workflow into ce/main (#8681)
* VAULT-34830: enable the new workflow (#8661)

* pipeline: various fixes for the cutover to the enterprise first workflow (#8686)

Various small fixes that were discovered when doing the cutover to the enterprise first merge workflow:

- The `actions-docker-build` action infers enterprise metadata magically from the repository name. Use a branch that allows configuring the repo name until it's merged upstream.
- Fix some CE-In-Enterprise outputs in our metadata job.
- Pass the recurse depth flag correctly when creating backports
- Set the package name when calling the `build-vault` composite action
- Disallow merging changes into `main` and `release/*` when executing in the `hashicorp/vault` repository. This is a hack until PSS-909 is resolved.
- Use self-hosted runners when testing arm64 CE containers in enterprise.

Signed-off-by: Ryan Cragun <me@ryan.ec>

 Conflicts:
	.github/workflows/backport-automation-ent.yml
	.github/workflows/test-run-enos-scenario-containers.yml

---------

Signed-off-by: Ryan Cragun <me@ryan.ec>
2025-08-18 20:26:44 -06:00
Ryan Cragun
4c3a440e1f
testhelpers(ldap): always time out if we can't start the container in 1 minute (#31509)
Signed-off-by: Ryan Cragun <me@ryan.ec>
2025-08-15 17:35:06 -06:00
lane-wetmore
04295060d1
remove readonly attr once element is ready for input (#31502) 2025-08-15 11:47:37 -05:00
Ryan Cragun
b5b4a95280
VAULT-34830 actions(plugin-update): update plugins from enterprise (#31474)
* [VAULT-34830] actions(plugin-update): update plugins from enterprise

Signed-off-by: Ryan Cragun <me@ryan.ec>
2025-08-15 10:34:29 -06:00
Ryan Cragun
7af25674b4
VAULT-38884, VAULT-38885: enos(rhel): bump 9.5 to 9.6 and add 10.0 (#31500)
Bump RHEL to 9.6 and remove a test that requires a fixture that was
never merged.

Signed-off-by: Ryan Cragun <me@ryan.ec>
2025-08-15 10:33:55 -06:00
Tin Vo
d5f65e7a16
VAULT-38463: Fix Enos LDAP issue for dev tests (#31407)
Co-authored-by: Tony Wittinger <anwittin@users.noreply.github.com>
2025-08-15 10:28:19 -06:00
Jade
d79813a4af
Add password rotation url to ldap auth (#31363)
* add rotation URL field

* add docs

* add test

* fix: correct variable name for root rotation URL in rotateRootCredential function

* fix: ensure proper formatting in TestRotateRootWithRotationUrl function

* fix: improve error handling in TestRotateRootWithRotationUrl for invalid rotation URL

* feat: add rotation URL support to LDAP credential configuration

* test: enhance validation in TestRotateRootWithRotationUrl for rotation URL effects

* Update path_config_rotate_root_test.go

* add changelog and update test docs

* Update ldap.mdx
2025-08-14 14:36:13 -05:00
Meggie
6649576ee5
VAULT-38897: Clarify that audit security fix is a breaking change (#31491)
* Clarify that audit security fix is a breaking change

* Trying to be more specific about impact
2025-08-14 14:42:17 -04:00
Luis (LT) Carbonell
bfa0c41c6d
(enos) generalize container startup script (#31483) 2025-08-14 14:06:05 +00:00
claire bontempo
a607fb181c
UI: wrap ember-power-select- overrides so Hds::SuperSelect is usable (#31492)
* wrap ember-power-select overrides in search-select css selector

* move class accidentally applied to nested block

* make renderInPlace default to true
2025-08-13 18:01:10 -07:00
lane-wetmore
bb54062c3d
UI: Snapshots index route (#31473)
* build out snapshots index route

* add card for loaded snapshot

* add tests

* lint fix and remove logs

* use api enum

* lint fix

* remove extra imports

* tidy

* routing updates

* update tests

* update styling

* improve types

* lint

* add copyright header

* update capability check

* pull out header

* add copyright headers

* update url

* Update ui/app/routes/vault/cluster/recovery/snapshots/snapshot.ts

Co-authored-by: claire bontempo <68122737+hellobontempo@users.noreply.github.com>

* test + error handling updates

* update details route and add integration tests

* tidy tests and pull out header title

* lint

* test updates

---------

Co-authored-by: claire bontempo <68122737+hellobontempo@users.noreply.github.com>
2025-08-13 15:07:45 -05:00
Dan Rivera
3f30ca89ce
UI: Security card component for new configuration page (#31487)
* setup layout for security card

* cleanup

* remove test use
2025-08-13 13:56:17 -04:00
Angel Garbarino
b0d8f4f1be
UI Bug fix: Fix DR Secondary view (#31478)
* test coverage and the fix

* not working

* fix failing test

* fix another test

* changelog

* the correct changelog number
2025-08-13 11:16:46 -06:00
Ryan Cragun
b76a28a1e0
[VAULT-38883] enos: remove Ubuntu 20.04 from the test matrix (#31482)
Ubunut 20.04 is EOL. Per our support and package policies we no longer
need to develop or test for that platform.

Signed-off-by: Ryan Cragun <me@ryan.ec>
2025-08-12 15:51:30 -06:00
Ryan Cragun
06ab7d2702
[VAULT-38882] actions(build): build and test on changes to gotoolchain (#31481)
Make sure that we always build and test the application if the go
toolchain changes.

Signed-off-by: Ryan Cragun <me@ryan.ec>
2025-08-12 15:51:05 -06:00
claire bontempo
7d4854d549
UI: Build dropdown filter toolbar (#31475)
* build filter toolbar component

* delete unused controllers

* rename enum and move to client count utils

* wire up filters to route query params

* update test coverage

* add support for appliedFilters from parent

* update type of ns param

* move lists to client-list page component
2025-08-12 17:41:15 +00:00
Matthew Irish
32e806f88a
[UI] - Glimmerize b64-toggle component (#31423)
* convert b64-toggle to ts and make it a glimmer component

* update usage of b64-toggle
2025-08-12 11:23:32 -05:00
miagilepner
bcd584af20
VAULT-37630: CE changes for recover as a copy policy handling (#31472)
* CE changes for recover as a copy policy

* make proto
2025-08-12 10:29:22 +02:00
Jaired Jawed
a0f8dab6a9
Fix bug preventing multiline statemtents in rotation_statements for database static roles (#31442)
* added multiline unit test to replicate error & eventual fix

* create changelog

* move multiline statement test above the bad statements test for consistency.

* Add support for multiline statements in changeUserPassword

* Update expiration multi-line statements

* pr fixes
2025-08-11 14:48:47 -07:00
Matthew Irish
c88b3136a6
enable test server in dev (#31469) 2025-08-11 13:55:24 -05:00
claire bontempo
b0a9ad2236
UI: Generalize Clients::Table component (#31439)
* generalize test selectors

* generalize table component

* update tests, add component test

* delete unused selectors

* add coverage for yielded empty state

* update sync selector

* update to advanced table

* rename key to "namespace_path"
2025-08-11 11:36:56 -07:00
Dan Rivera
6d7968a7aa
UI: Moving CTA buttons out of toolbars for keymgmt + add manage button (#31466)
* moving CTA buttons out of toolbar

* adding flag check, using dropdown

* moving flag computations into computed property
2025-08-11 14:05:37 -04:00
claire bontempo
6b1a6b2efd
UI: Upgrade to HDS 4.20.1 (#31467)
* update package

* update test for replicaiton

* fix a11y failure
2025-08-11 09:12:15 -07:00
claire bontempo
9b752258ef
use findRecord instead (#31470) 2025-08-11 08:46:25 -05:00
kpcraig
17e5b92d63
Log transit rotations (#31420) 2025-08-08 18:11:16 -04:00
kpcraig
1fafe2f4d5
Log DB Rotations (#31402) 2025-08-08 16:15:02 -04:00
Meggie
dca6233649
Clarifying audit log feature releases (#31460)
While reviewing some audit log upgrade guidance improvements, I noticed that the changelog is misleading.

We released Audit Log Filtering in Vault 1.16.0. It appeared both in 1.16.0 and 1.17.0, so I've removed it from the 1.17.0 features list.

I've also added the "enterprise" note to the 1.16.0 changelog entry because it was released as an enterprise feature.
2025-08-08 16:05:42 -04:00
kpcraig
36d873aae2
Log LDAP Rotations (#31401) 2025-08-08 11:56:54 -04:00
Dan Rivera
33132416cc
moving CTA out from toolbar into separate hds button (#31456) 2025-08-07 17:41:05 -04:00
Dan Rivera
53bd1e2af2
UI: Adding flag for displaying old or new page views for secret engines (#31451)
* adding oldengine flag and comments in metadata util

* remnant
2025-08-07 17:40:32 -04:00
Ryan Cragun
8f4a2b5bc3
[VAULT-34830] actions: update CE workflows for unified enterprise repository (#31425)
Various small changes and tweaks to our CI/CD workflows to allow for running CE branches in the context of `hashicorp/vault-enterprise`.

Signed-off-by: Ryan Cragun <me@ryan.ec>
2025-08-07 14:35:18 -06:00
Violet Hynes
dd1063b0d4
VAULT-38794 Update KV plugin to add additional version metadata for observations (#31455) 2025-08-07 15:56:50 -04:00
Charles Nwokotubo
475928cac4
VAULT-30196: Use updated vault cluster for autopilot (#31447) 2025-08-07 13:00:22 -06:00
Murali
aa73cbf04f
updating utilization api client (#31385) 2025-08-08 00:14:40 +05:30
Ryan Cragun
d762062d78
go: bump Go to 1.24.6 to resolve GO-2025-3849 (main) (#31450)
go: bump Go to 1.24.6 to resolve GO-2025-3849

Signed-off-by: Ryan Cragun <me@ryan.ec>
2025-08-07 12:24:43 -06:00
miagilepner
a18b4dfc9b
VAULT-37080: Fix changelog and comment (#31449) 2025-08-07 17:24:07 +00:00
Luis (LT) Carbonell
897938b0a1
(enos) require unseal failure test before re-adding raft nodes in enos workflow (#31446) 2025-08-07 16:48:56 +00:00
miagilepner
beeb8c2032
VAULT-37080: Maintain redundancy zones for unhealthy nodes (#31443)
* ce changes

* changelog
2025-08-07 17:01:02 +02:00