365 Commits

Author SHA1 Message Date
Victor Rodriguez
48cec9729d
Enforce PKI issuer constraints. (#29045)
Add environment variable VAULT_DISABLE_PKI_CONSTRAINTS_VERIFICATION.

Setting VAULT_DISABLE_PKI_CONSTRAINTS_VERIFICATION=true will disable the cert
issuance/signing verification.
2024-11-27 18:34:26 +01:00
Victor Rodriguez
b2886d2a99
Revert "Perform validation when issuing or signing certificates. (#28921)" (#29041)
This reverts commit 31fc51c68fb4591ece3dcdd6fd7a8f4b18b465fa.
2024-11-27 16:22:20 +00:00
Victor Rodriguez
31fc51c68f
Perform validation when issuing or signing certificates. (#28921)
Add environment variable VAULT_DISABLE_ISSUING_VERIFICATION.

Setting VAULT_DISABLE_ISSUING_VERIFICATION=true will disable the cert
issuance/signing verification.
2024-11-27 13:23:07 +00:00
Mitch Pronschinske
5dee624657
[DOCS] Fix wrong casing of "key-value" on the KV secrets engine page (#28970) 2024-11-21 12:14:09 +00:00
kevin-loehfelm
50cc886e46
Update typo in AWS Secrets Engine documentation (#28930)
Co-authored-by: Kuba Wieczorek <kuba.wieczorek@hashicorp.com>
2024-11-19 15:14:08 +00:00
Sarah Chavis
1b419330e3
updates screenshots and add ent alert (#28934) 2024-11-18 11:39:19 -08:00
Sarah Chavis
cb0448a785
[DOCS] Refresh kv docs (#28919)
* refresh kv docs

* apply feedback and add missing API instructions
2024-11-15 17:06:26 -08:00
Yoko Hyakuna
dc40b23d9a
[Docs] Move the tutorial content to the docs (#28894)
* Move the tutorial content to the docs

* Split the usage doc from the overview

* Change 'Key Management' to 'key management' where appropriate
2024-11-15 09:05:30 -08:00
Jonathan Frappier
1a43ff6755
Remove deprecated tutorial links (#28905) 2024-11-13 15:26:38 -05:00
Jonathan Frappier
47eeeb7996
Add steps from IBM Db2 tutorial (#28879) 2024-11-12 09:39:49 -05:00
Gabriele Olla
ea3002fd30
Add iam:GetUser action for IAM Policy to AWS docs (#28788)
* add iam:GetUser action on split policy

Signed-off-by: Olla Gabriele <gabriele.olla@prima.it>
2024-11-12 09:28:33 -05:00
Martin
c38c5763ed
Fix: Add missing iam:TagUser permission (#28757)
Co-authored-by: Yoko Hyakuna <yoko@hashicorp.com>
2024-11-04 09:20:37 -08:00
Steven Clark
e489631e87
Transit: Allow ENT only arguments for sign/verify. Add docs for new Ed25519 signature types (#28821) 2024-11-01 12:57:52 -04:00
Scott Miller
415d260995
Support trimming trailing slashes via a mount tuneable to support CMPv2 (#28752)
* Support trimming trailing slashes via a mount tuneable to support CMPv2

* changelog/

* Perform trimming in handleLoginRequest too

* Eagerly fetch the mount entry so we only test this once

* Add a mount match function that gets path and entry

* Update vault/request_handling.go

Co-authored-by: Steven Clark <steven.clark@hashicorp.com>

* more docs

* Some patches (from ENT) didnt apply

* patch fail

* Update vault/router.go

Co-authored-by: Steven Clark <steven.clark@hashicorp.com>

* PR feedback

* dupe

* another dupe

* Add support for enabling trim_request_trailing_slashes on mount creation

* Fix read mount api returning configuration for trim_request_trailing_slashes

* Fix test assertion

* Switch enable and tune arguments to BoolPtrVal to allow end-users to specify false flag

* Add trim-request-trailing-slashes to the auth enable API and CLI

---------

Co-authored-by: Steven Clark <steven.clark@hashicorp.com>
2024-10-24 10:47:17 -05:00
Scott Miller
c41f5bdcb4
Document the encryption algorithms used in ADP auditing purposes (#28691) 2024-10-15 11:56:16 -05:00
John-Michael Faircloth
945d0f7989
docs: fix links and format for mongodbatlas secrets (#28688) 2024-10-14 11:17:04 -07:00
ram-parameswaran
518027ba83
Update Azure SDK logger variable in docs (#28622)
* Update azure.mdx

Update Azure secrets engine docs to use AZURE_SDK_GO_LOGGING for Azure debug

* Update azure.mdx

Update Azure Auth engine docs to use AZURE_SDK_GO_LOGGING for Azure debug
2024-10-08 16:55:55 -07:00
vinay-gopalan
08e8776dfb
Add documentation for new rootless password rotation workflow for DB Static Roles (#28374)
Co-authored-by: John-Michael Faircloth <fairclothjm@users.noreply.github.com>
Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>
2024-10-07 15:51:30 +00:00
gerardma77
2e6944d93e
Adding AD lifetime period of an old password note to Vault LDAP secrets Engine Documentation. (#28428)
* adding_OldPasswordAllowedPeriod_waring

* Updated note for AD passwords

* Update website/content/docs/secrets/ldap.mdx

Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>

---------

Co-authored-by: Equus quagga <jan.prinsloo@hashicorp.com>
Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>
2024-09-19 11:44:00 -07:00
Violet Hynes
450506ba9c
Fix link to mongodb atlas page (#28403)
* Fix link to mongodb atlas page

* Fix missing space
2024-09-17 15:22:06 -04:00
Scott Miller
6fe1b88401
Remove the BETA badge from EST in documentation (#28265)
* Remove the BETA badge from EST

* Add ent badge
2024-09-10 17:35:13 +00:00
John-Michael Faircloth
f7701e1d8c
docs: add postgres TLS docs (#28302)
* docs: add postgres TLS docs

* fix link formatting
2024-09-09 12:34:16 -05:00
Steven Clark
829d4f1ce3
Fix some broken links on the PKI EST docs page (#28303) 2024-09-06 08:58:39 -04:00
Scott Miller
047ec756c0
Document CMPv2 (#27915)
* CMPv2 Documentation, and restructuring of Issuance Protocols into its own section for PKI.

* title

* CMPv2 API

* Add default path policy

* Update website/content/docs/secrets/pki/cmpv2.mdx

Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>

* Update website/content/docs/secrets/pki/cmpv2.mdx

Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>

* Update website/content/docs/secrets/pki/cmpv2.mdx

Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>

* Update website/content/docs/secrets/pki/cmpv2.mdx

Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>

* respond to some PR feedback

* pr feedback

* Fix nav and add key_usage

* Update website/content/docs/secrets/pki/cmpv2.mdx

Co-authored-by: Steven Clark <steven.clark@hashicorp.com>

* Update website/content/docs/secrets/pki/cmpv2.mdx

Co-authored-by: Steven Clark <steven.clark@hashicorp.com>

* Update website/content/api-docs/secret/pki/issuance.mdx

Co-authored-by: Steven Clark <steven.clark@hashicorp.com>

* Docs fixes

---------

Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>
Co-authored-by: Steven Clark <steven.clark@hashicorp.com>
2024-09-04 17:24:50 -05:00
Steffy Fort
c956d0aa5a
docs: correct list syntax (#28119)
Co-authored-by: divyaac <divya.chandrasekaran@hashicorp.com>
2024-08-20 11:21:12 -07:00
Theron Voran
a17121c138
Update hana db pkg (#27950)
* database/hana: use go-hdb v1.10.1

* docs/hana: quotes around password so dashes don't break it
2024-08-05 16:26:24 -07:00
claire bontempo
2fbead02dc
Docs: add UI support to databases capabilities docs (#27717)
* add UI support to DB docs

* add in parenthesis instead

* Revert "add in parenthesis instead"

This reverts commit 843554358ae5df07cb49af0a33d0539e581c395f.

* add version to ui support column
2024-07-10 08:40:03 -07:00
Mary Frances
85bbab93f2
Update mongodbatlas.mdx (#27511)
Fix Capabilities heading Markdown syntax
2024-07-05 09:42:58 -04:00
Yoko Hyakuna
366fb73b38
[Docs] Update the KV secrets engine overview page (#27658)
* Add v1 ad v2 comparison section

* Remove the reference to the tutorial

* Fix a typo
2024-07-03 08:36:39 -07:00
Jonathan Frappier
b35305f6ec
Remove link to static role tutorial (#27640)
* Remove link to static role tutorial

* I honestly dont know but VSCode said I had changes
2024-06-28 15:46:16 -04:00
AvivGuiser
3372a9b4db
secrets/database: Add usePrivateIP field for cloudsql postgresql instances (#26828)
* add usePrivateIP params to determine if to use private ip dial option

Signed-off-by: aviv guiser <avivguiser@gmail.com>

* fix the connection_producer.go in mysql plugin

Signed-off-by: aviv guiser <avivguiser@gmail.com>

* Update sdk/database/helper/connutil/sql.go

Co-authored-by: Robert <17119716+robmonte@users.noreply.github.com>

---------

Signed-off-by: aviv guiser <avivguiser@gmail.com>
Signed-off-by: AvivGuiser <aviv.guiser@placer.ai>
Co-authored-by: Robert <17119716+robmonte@users.noreply.github.com>
2024-06-25 14:17:13 -05:00
Scott Miller
c131b47535
Link to the CLI commands in the BYOK pages (#27490) 2024-06-13 11:41:21 -05:00
Mary Frances
0ca6fe9af2
Update mongodbatlas.mdx (#27395)
Capitalize Atlas and add space in note.
2024-06-10 10:44:03 -04:00
vinay-gopalan
5acc4331ea
Add WIF documentation for Azure Auth and Secrets engines (#27185) 2024-06-03 13:17:13 -07:00
vinay-gopalan
01ccf580d8
Add WIF documentation for GCP Auth and Secrets engines (#27170)
Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>
2024-06-03 13:16:56 -07:00
John-Michael Faircloth
f528036e45
docs: ldap secrets hierarchical paths (#27203)
* docs: ldap secrets hierarchical paths

* changelog

* Apply suggestions from code review

Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>

* role_name => set_name

---------

Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>
2024-05-24 09:10:59 -05:00
Steven Clark
0bb3ddf7a7
Update cert metadata docs (#27025)
* Update cert metadata docs

 - Add missing enterprise notices on parameters and titles
 - Mention that the metadata parameter is a base64 encoded string
 - Tweak the no_store_metadata description
 - Update some entries within the PKI considerations page

* Add serial_number to read certificate metadata sample response

* Update fields sign-verbatim is affected by the specified role
2024-05-16 11:08:31 -04:00
Yoko Hyakuna
f12c5238db
[Docs] Point to the pricing page rather than the product page (#27026)
* Point to the pricing page rather than the product page

* Empty-Commit

* Add 'appropriate' to the license statement

* Use the partial to mention about VE license

* Minor fix

* add newline

* Revert "add newline"

This reverts commit 64615cba08321b164027dd2d000a90a0d4979a02.

---------

Co-authored-by: Nels Andereck <nels.andereck@hashicorp.com>
2024-05-15 17:49:01 -07:00
Sarah Chavis
8d2362364f
[DOCS] Correct code block language (#26996) 2024-05-13 16:39:20 -04:00
Steven Clark
fe2b4c6f7a
PKI: Allow operators to increase the maximum TTL for ACME issued certificates (#26797)
* PKI: Allow operators to increase the maximum TTL for ACME issued certificates

* Add cl
2024-05-09 10:41:28 -04:00
gabeknell
de11f27713
Update kmip.mdx (#24159)
* Update kmip.mdx

Added "performance standby" to the servers the KMIP client can connect to

---------

Co-authored-by: Peter Wilson <peter.wilson@hashicorp.com>
2024-05-02 16:01:58 +00:00
kevin-loehfelm
1b21400195
added documentation for mongodb atlas database secrets engine eventua… (#24152)
* added documentation for mongodb atlas database secrets engine eventual consistency
2024-05-01 14:19:26 -07:00
Rachel Culpepper
b49622076f
Add docs for cmac (#26654)
* add docs for cmac

* move cmac
2024-04-25 17:05:11 -05:00
Yoko Hyakuna
2becdceab0
Replace 'HCP Vault' with 'HCP Vault Dedicated' (#26457)
* Replace 'HCP Vault' with 'HCP Vault Dedicated'

* Replace 'HCP Vault' with 'HCP Vault Dedicated' where applicable

* Replace 'Terraform Cloud' with 'HCP Terraform'

* Minor format fixes

* Update the side-nav title to 'HCP Terraform'

* Undo changes to Terraform Cloud secrets engine
2024-04-22 08:44:13 -04:00
Michael Kosir
691bf9b3a7
Docs: update deprecated transform command (#26368)
* update deprecated command

* fixed spacing
2024-04-12 09:03:03 -04:00
Samuel Lee
31aaf4e50b
Update azurekeyvault.mdx (#26308)
Fixed typo in Azure Key Vault docs - mentions GCP Cloud KMS instead of Azure Key Vault KMS
2024-04-09 09:13:19 -04:00
Victor Rodriguez
02312cbb57
Fix typo in KMIP backend documentation. (#26304) 2024-04-08 16:08:41 -04:00
James Bayer
d1fda882a5
[DOCS] Update kmip.mdx to add Cert Authority details (#23907)
* Update kmip.mdx to add Cert Authority details

* Update website/content/docs/secrets/kmip.mdx

Accepted suggestion

Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>

---------

Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>
2024-04-08 15:51:05 -04:00
Wes Gilleland
3106f26474
Fix small typo in troubleshooting-acme.mdx (#24547)
* Fix small typo in troubleshooting-acme.mdx

* Create changelog/24547.txt

* Delete changelog/24547.txt

---------

Co-authored-by: Violet Hynes <violet.hynes@hashicorp.com>
2024-03-20 09:16:19 -04:00
MahmoudMansourr
56dcff5ea7
Update gcpkms.mdx "Added a new role required for key Import" (#25437)
the "cloudkms.importJobs.useToImport" role is missing from the documentation, however it's needed to distribute the keys to GCP'S KMS.
2024-03-13 18:02:58 +00:00