191 Commits

Author SHA1 Message Date
Erica Thompson
0660ea6fac
Update README (#31244)
* Update README

Let contributors know that docs will now be located in UDR

* Add comments to each mdx doc

Comment has been added to all mdx docs that are not partials

* chore: added changelog

changelog check failure

* wip: removed changelog

* Fix content errors

* Doc spacing

* Update website/content/docs/deploy/kubernetes/vso/helm.mdx

Co-authored-by: Tu Nguyen <im2nguyen@users.noreply.github.com>

---------

Co-authored-by: jonathanfrappier <92055993+jonathanfrappier@users.noreply.github.com>
Co-authored-by: Tu Nguyen <im2nguyen@users.noreply.github.com>
2025-07-22 08:12:22 -07:00
himanshu-8693
465375fea4
Update azure.mdx for adding one section around known issue & its fix (#30072)
* Update azure.mdx

Added one section around one known issue & how to fix it, while using Azure Auth method for workload/application running on K8s.

* Update website/content/docs/auth/azure.mdx

* Update website/content/docs/auth/azure.mdx

* Update website/content/docs/auth/azure.mdx

* Update website/content/docs/auth/azure.mdx

---------

Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>
2025-07-16 17:23:30 -07:00
Klemen Poličar
6f5a3307ae
Update github.mdx add notice about configuring vault for github enter… (#29686)
* Update github.mdx add notice about configuring vault for github enterprise authentication

* Update github.mdx Fix spacing

* Update website/content/docs/auth/github.mdx

---------

Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>
2025-07-16 22:42:14 +00:00
Robert
c948ec09af
Fix gcp auth trust relationship requirements block (#31293) 2025-07-16 11:20:32 -07:00
gerardma77
5834655f6d
Added certificate section to LDAP Auth method documentation. (#30318)
* a

* Update website/content/docs/auth/ldap.mdx

Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>

---------

Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>
2025-07-14 17:00:44 -07:00
Jaired Jawed
c4467ff9e5
Update docs so that users know that kubernetes roles will require the (#31043)
audience field in Vault 1.21+.
2025-06-19 16:51:13 -07:00
claire bontempo
3701dcf3ca
Docs: GUI custom login feature (#30799)
* saving because laptop is bad and should feel bad

* save

* make supported login types partial

* add api-docs partial

* update custom login docs

* reword tip?

* add delete section

* address feedback, update using a direct link section

* move tips down

* remove table lines and see if that fixes build?

* revert changes to custom-messages mdx

* add line break?

* format fixes

* empty commit again

* check vercel?

* add line break

* update "namespace" to be "namespace_path"

* reduce use of "preferred"

* address feedback

* use "settings" to match GUI verbiage

* missed a couple feedback comments

* add "single" and "multiple"

* fix link rendering

* fix namespace-path typos for namespace params referencing namespace context

* address feedback

---------

Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>
2025-06-10 15:38:31 -07:00
Jaired Jawed
f8b8b2af70
update docs to state that either bound_service_principal_ids or bound_group_ids parameters are required (#30913) 2025-06-09 08:23:14 -07:00
Steven Clark
b91470af0a
PKI SCEP documentation updates (#30753)
* most important scep docs

* oops. forgot to commit everything.

* Add docs around SCEP auth

* More SCEP api doc updates

* Add return_full_ca_chain parameter to SCEP config docs

* Remove duplicated EST sections

* Update missing SCEP reference within pki/index.mdx

* PR feedback

* PR feedback 2

* Rename return_full_ca_chain to restrict_ca_chain_to_issuer

* Apply suggestions from code review

Co-authored-by: Yoko Hyakuna <yoko@hashicorp.com>

* Apply suggestions from code review

Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>

* Tweaks to review suggestions from Sarah

* Apply suggestions from code review

Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>

* Fix typo

* Fix typo

---------

Co-authored-by: Kit Haines <khaines@mit.edu>
Co-authored-by: Yoko Hyakuna <yoko@hashicorp.com>
Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>
2025-06-06 13:46:17 -04:00
Trifon Tsantsarov
6abea37441
Update index.mdx (#28650)
The way it is currently written:

oidc_discovery_url="https://myco.auth0.com/"

with the forwarding slash after .com

it results to an error:

error checking oidc discovery URL

Screenshot attached:
2025-05-21 12:22:37 -07:00
Jaired Jawed
1face9d8cf
Update Docs For Bound Audience Explanation (#30519)
* update docs for more clarity around bound audiences

* more updates

* update changelog

* Delete changelog/30519.txt

* Update website/content/docs/auth/jwt/index.mdx

Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>

* Update website/content/api-docs/auth/jwt.mdx

Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>

---------

Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>
2025-05-13 13:44:31 -07:00
Sarah Chavis
485ccbc5da
[DOCS] IA refresh (phase 2) (#30287) 2025-04-29 17:08:14 -07:00
Jamie Tanna
3ef21a9d6c
docs(github): add note about VAULT_AUTH_GITHUB_TOKEN (#30074)
* docs(github): add note about `VAULT_AUTH_GITHUB_TOKEN`

* squash-pls

* Update website/content/docs/auth/github.mdx

Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>

---------

Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>
2025-04-04 15:38:04 -04:00
Yoko Hyakuna
c23c05fab9
[Docs] MFA TOTP doc added info (#30043)
* Add compartibility table

* MFA TOTP doc update

* Removed the callout box
2025-03-27 13:30:36 -07:00
Thy Ton
0d8e67abac
add docs for Azure auth resource_group_name, vm_name, vmss_name security improvement (#29969) 2025-03-26 12:50:42 -05:00
Robert
35af160994
Add docs for GCP automated root rotation (#29782)
* Fix azure reference

* Add gcp docs

* Fix auth references
2025-03-04 11:58:13 -06:00
vinay-gopalan
1091474e4d
Add docs for scheduled root rotation feature for the AWS and DB engines (#29755) 2025-02-27 15:48:47 -08:00
kpcraig
8497dc66d0
Add docs for plugins with enterprise scheduled root rotation feature (#29608) 2025-02-27 10:44:36 -08:00
Equus quagga
19adf7c6cc
Adds an option to enable sAMAccountname logins when upndomain is set (#29118)
* Adds an option to enable sAMAccountname logins when upndomain is set

* Adds an option to enable sAMAccountname logins when upndomain is set

* Updated changelog entry

* Update 29118.txt

* Updated cap/ldap version due to needed dependency

* Updated cap/ldap version due to needed dependency

* Restart CI

* Updated LDAP api-docs and docs describing the enable_samaccountname_login option

* Added missing comma in config_test.go

* Update enables_samaccountname

Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>

* Update enable_samaccountname_login feature documentation

Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>

---------

Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>
2025-01-24 12:08:18 -06:00
himran92
31499884c4
doc updates to include new fields for SAML sig validation (#29195)
* doc updates to include new fields for SAML sig validation

* edit description

* changes

* remove extra option of validating both options
2025-01-22 17:03:07 -05:00
Ken Keller
23a663fcf9
mfa login/totp (#29094)
* initial commit

* update mfa/totp
2024-12-13 09:38:09 -06:00
claire bontempo
bc09d9acec
Docs: Add updated screenshots to kv subkey docs (#29067)
* clarify subkey read in GUI

* add screenshots

* add to index

* update kv nav steps

* update alt text for screenshot

* update steps

* edits

* fix build error and simplify path structure

* fix paths

* missed one

* missed another one >_<

* Update website/content/docs/secrets/kv/kv-v2/cookbook/write-data.mdx

---------

Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>
2024-12-04 12:14:08 -08:00
Sarah Chavis
826d2be5b3
[DOCS] SEO updates for Auth pages (#29070)
* save

* SEO updates for auth pages

* tweak nav titles and other small corrections
2024-12-03 13:18:53 -08:00
Yoko Hyakuna
dc87d37969
[DOCS] Move the tutorial content to the doc (#28978)
* Move the tutorial content to the doc

* Updated section header
2024-11-21 08:04:26 -08:00
Yoko Hyakuna
69b1a615fb
[Docs] Add recommended patterns (#28843)
* Content conversion from tutorial to doc - seal

* Add AppRole best practices

* Clean up the reference list

* Updated the title

* match the titles

* Add namespaces best practices

* Update the table style
2024-11-07 13:17:43 -08:00
Jonathan Frappier
3349dc745d
Add SAML example to docs (#27121)
* Add SAML example

* Docs/add saml edits (#28732)

* editing suggestions (start)

* save edits

* Update website/content/docs/auth/saml/adfs.mdx

* Update website/content/docs/auth/saml/index.mdx

* Update website/content/docs/auth/saml/adfs.mdx

* Update website/content/docs/auth/saml/troubleshoot-adfs/index.mdx

---------

Co-authored-by: Jonathan Frappier <92055993+jonathanfrappier@users.noreply.github.com>

* Fix content errors

* missed one >_<

---------

Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>
2024-10-24 11:47:33 -07:00
ram-parameswaran
518027ba83
Update Azure SDK logger variable in docs (#28622)
* Update azure.mdx

Update Azure secrets engine docs to use AZURE_SDK_GO_LOGGING for Azure debug

* Update azure.mdx

Update Azure Auth engine docs to use AZURE_SDK_GO_LOGGING for Azure debug
2024-10-08 16:55:55 -07:00
Scott Miller
f52b984821
Mention the cert forwarding header in cert auth docs (#28377)
* Mention the cert forwarding header in cert auth docs

* Move to own section and fix link
2024-09-12 09:14:22 -05:00
djschnei21
4c0cc27f6c
remove recommendations (#28063)
removing these recommendations because they are not inline with conventional wisdom or our HVDs.  For example, AppRole should not be leverage when a platform native identity source is available (e.g. AWS, Azure, GCP, K8s, Nomad, etc...)
2024-08-13 10:14:21 -07:00
Yoko Hyakuna
7509ef169b
[Docs] Add cross referencing link to AppRole usage best practices (#28038)
* Add cross referencing link to AppRole usage best practices

* Minor edits to flow the sentence better
2024-08-09 08:27:49 -07:00
Roman O'Brien
3dad93eb38
update(kubernetes.mdx): k8s-tokenreview URL (#27993)
Co-authored-by: akshya96 <87045294+akshya96@users.noreply.github.com>
2024-08-06 16:30:10 -07:00
VBouiller
9b3a73daba
Update userpass CLI doc for custom path flag (#27968)
It's not clear from the get go how to use the userpass auth method with a custom path.

Co-authored-by: Yoko Hyakuna <yoko@hashicorp.com>
2024-08-05 17:42:23 +00:00
aphorise
37dbe7bf38
Docs: Approle removed incorrect token_num_uses that's incomplete with batch (#27909)
Corrected Docs at: [vault/docs/auth/approle **Via the CLI**](https://developer.hashicorp.com/vault/docs/auth/approle#via-the-cli-1) which results in the error message below on versions near to Vault 1.17.x.

```
Error writing data to auth/approle/role/my-role: Error making API request.

URL: PUT https://.../v1/auth/approle/role/my-role
Code: 400. Errors:

* 'token_type' cannot be 'batch' or 'default_batch' when set to generate tokens with limited use count
```

Co-authored-by: Yoko Hyakuna <yoko@hashicorp.com>
2024-08-02 19:23:33 +00:00
John-Michael Faircloth
c23ebb173f
docs: add note on microsoft's saml auth bound attributes syntax (#27938) 2024-08-01 11:16:00 -04:00
John-Michael Faircloth
ab08d623e8
docs: add note to jwt auth for bound aud changes (#27530) 2024-06-19 08:35:22 -05:00
John-Michael Faircloth
76ebf0b41b
docs: correct auth jwt role requirements (#27384)
* docs: correct auth jwt role requirements

* remove upgrade guide to be added in separate PR

* Revert "remove upgrade guide to be added in separate PR"

This reverts commit 6554d3ff63623a329b0d93f7143d95cd3f19b3e6.

* update required details for bound audience

* Apply suggestions from code review

Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>

* fix formatting to match the existing format of the file

* add 1.16 known issues

* add 1.17 upgrade guide note

---------

Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>
2024-06-12 13:46:40 -05:00
vinay-gopalan
5acc4331ea
Add WIF documentation for Azure Auth and Secrets engines (#27185) 2024-06-03 13:17:13 -07:00
vinay-gopalan
01ccf580d8
Add WIF documentation for GCP Auth and Secrets engines (#27170)
Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>
2024-06-03 13:16:56 -07:00
Milena Zlaticanin
309d832462
Add AWS Auth WIF docs (#27054)
* add aws auth wif docs

* update docs

* update docs
2024-05-23 12:58:08 -07:00
Yoko Hyakuna
2becdceab0
Replace 'HCP Vault' with 'HCP Vault Dedicated' (#26457)
* Replace 'HCP Vault' with 'HCP Vault Dedicated'

* Replace 'HCP Vault' with 'HCP Vault Dedicated' where applicable

* Replace 'Terraform Cloud' with 'HCP Terraform'

* Minor format fixes

* Update the side-nav title to 'HCP Terraform'

* Undo changes to Terraform Cloud secrets engine
2024-04-22 08:44:13 -04:00
JMGoldsmith
7b4f6409c6
[DOCS] Updating approle docs and token partial to include batch token prefer… (#26490)
* updating approle docs and token partial to include batch token preference

* Update website/content/docs/auth/approle.mdx

Co-authored-by: Brian Shumate <brianshumate@users.noreply.github.com>

* Update website/content/partials/tokenstorefields.mdx

Co-authored-by: Brian Shumate <brianshumate@users.noreply.github.com>

* Update website/content/docs/auth/approle.mdx

Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>

---------

Co-authored-by: Brian Shumate <brianshumate@users.noreply.github.com>
Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>
2024-04-19 12:32:12 -04:00
Chris Capurso
e1c3f4ac17
clarfiy login MFA not supported for token auth (#26411) 2024-04-15 11:09:59 -04:00
Thy Ton
df477f6404
docs make kubernetes_ca_cert optional on kubernetes auth (#25963)
---------

Co-authored-by: Ben Ash <32777270+benashz@users.noreply.github.com>
Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>
2024-03-27 15:45:43 -07:00
NikolaiMagicnet
c9dafc1971
Fixed the URL (#26178)
Co-authored-by: Chris Capurso <1036769+ccapurso@users.noreply.github.com>
2024-03-27 12:10:19 -04:00
Karuppiah Natarajan
30667916b7
fix link to specifying ttl and audience section of kubernetes oidc provider (#26097) 2024-03-22 12:21:17 -04:00
Thomas Decaux
29dec5dfc4
fix azuread doc user_claim must be sub (#25896)
Fix error "claim "email" not found in token"

Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>
2024-03-13 18:09:54 +00:00
Pascal Reeb
646034a97d
fix(oidc/azuread): set correct oidc_scopes (#25477)
Co-authored-by: Peter Wilson <peter.wilson@hashicorp.com>
2024-03-13 18:00:22 +00:00
Peter Wilson
a311735761
Support pre-hashed passwords with userpass backend (#25862)
* allows use of pre-hashed passwords with userpass backend

* Remove unneeded error

* Single error check after switch

* use param name quoted in error message

* updated test for quoted param in error

* white space fixes for markdown doc

* More whitespace fixes

* added changelog

* Password/pre-hashed password are only required on 'create' operation

* docs indentation

* Update website/content/docs/auth/userpass.mdx

Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>

* Updated docs

* Check length of hash too

* Update builtin/credential/userpass/path_user_password_test.go

:)

Co-authored-by: Kuba Wieczorek <kuba.wieczorek@hashicorp.com>

---------

Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>
Co-authored-by: Kuba Wieczorek <kuba.wieczorek@hashicorp.com>
2024-03-12 18:16:11 +00:00
Thy Ton
50aa6eea70
docs: add templated policies workflow example to kubernetes auth (#25694)
---------

Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>
Co-authored-by: Theron Voran <tvoran@users.noreply.github.com>
2024-03-01 15:11:14 -08:00
Austin Gebauer
6d4f5df69c
auth/jwt: adds documentation for multi-jwks config parameter (#25503)
* auth/jwt: adds documentation for multi-jwks config parameter

* updates bound_issuer parameter

* fix link
2024-02-20 08:49:53 -08:00