17834 Commits

Author SHA1 Message Date
Alexander Scheel
04a081226d
Add docs on CIEPS issuance (#22098)
Signed-off-by: Alexander Scheel <alex.scheel@hashicorp.com>
2023-08-09 08:01:17 -04:00
Austin Gebauer
a70aaf24c0
secrets/db: improves error logs for static role rotation (#22253)
* secrets/db: improves error logs for static role rotation

* use logger.With to add incremental context

* adds changelog
2023-08-08 16:28:31 -07:00
Raymond Ho
f8dd46acb8
Address LDAP issues (#22249) 2023-08-08 13:49:26 -07:00
Marc Boudreau
263614051d
Audit Logging Using go-eventlogger Under Experiment Flag (#22234)
* add hashfunc field to EntryFormatter struct and adjust NewEntryFormatter function and tests
* add HeaderAdjuster interface and require it in EntryFormatter
* adjust all references to NewEntryFormatter to include a HeaderAdjuster parameter
* replace use of hash function in AuditedHeadersConfig's ApplyConfig method with Salter interface instance
* export audit.NewEvent function and adjust function signature
* add eventlogger based handling in LogRequest
* adjust eventlogger.Broker according to number of backends
* record auditing metrics
* only send events if a pipeline is registered
* remove TODO comments
* remove unused struct and method
* move setup of audited headers earlier into Core's initialization
* adjust entry_formatter to properly handle request headers
* protect against potential segmentation fault
* moved common code out of both switch cases
* protect against case where a.Data.Request or a.Data.Request.Headers is nil

---------

Co-authored-by: Peter Wilson <peter.wilson@hashicorp.com>
2023-08-08 21:01:28 +01:00
claire bontempo
6b6b0050fe
remove on input event (#22243) 2023-08-08 12:18:15 -07:00
Ville Vesilehto
eefd4529e9
chore: avoid unnecessary byte/string conversion calls (#21854)
* chore: avoid unnecessary conversion calls

* add changelog entry

---------

Co-authored-by: Violet Hynes <violet.hynes@hashicorp.com>
2023-08-08 17:50:54 +00:00
Mike Palmiotto
4c8cc87794
Automatically track subloggers in allLoggers (#22038)
* Automatically track subloggers in allLoggers

This PR introduces a new interface called `SubloggerAdder` for tracking
allLoggers across startup phases.

The interface enables us to register a single `SubloggerHook` during
initial logger creation and hand off management of `allLoggers` during
the three phases we need to handle:

- Before `CoreConfig` is created, the `SubloggerHook`
  (`AppendToAllLoggers`) appends new subloggers to
  `ServerCommand.allLoggers`.

- After `CoreConfig` is created and before `NewCore` returns, new subloggers
  are added to `CoreConfig.AllLoggers`. Intermediate state must also be
  kept in sync within NewCore to track new subloggers before we return
  to the server command and register the `Core.SubloggerAdder`
  implementation.

- After `NewCore` returns to the server command, we register Core as the
  implementer of `ServerCommand.SubloggerAdder` ensuring that all new
  subloggers are appended to `Core.allLoggers`.

* Wire up the sublogger hook in NewTestLogger
2023-08-08 17:47:09 +00:00
Kianna
bfef207711
UI: Add missing allowed_user_ids to role form in PKI (#22191) 2023-08-08 09:58:57 -07:00
John-Michael Faircloth
a1a5be97e2
docs/db: fix outdated static role information (#22239) 2023-08-08 11:02:53 -05:00
Alexander Scheel
be2f109275
Ignore errors from rollback manager invocations (#22235)
* Ignore errors from rollback manager invocations

During reload and mount move operations, we want to ensure that errors
created by the final Rollback are not fatal (which risk failing
replication in Enterprise when the core/mounts table gets invalidated).
This mirrors the behavior of the periodic rollback manager, which
only logs the error.

This updates the noop backend to allow failing just rollback operations,
which we can use in tests to verify this behavior and ensure the core
operations (plugin reload, plugin move, and seal/unseal) are not broken
by this. Note that most of these operations were asynchronous from the
client's PoV and thus did not fail anyways prior to this change.

Signed-off-by: Alexander Scheel <alex.scheel@hashicorp.com>

* Add changelog entry

Signed-off-by: Alexander Scheel <alex.scheel@hashicorp.com>

* Update vault/external_tests/router/router_ext_test.go

Co-authored-by: Nick Cabatoff <ncabatoff@hashicorp.com>

---------

Signed-off-by: Alexander Scheel <alex.scheel@hashicorp.com>
Co-authored-by: Nick Cabatoff <ncabatoff@hashicorp.com>
2023-08-08 15:42:02 +00:00
Peter Wilson
cd02421c7a
Audit: small tidy up (#22232)
* options => opts

* Standardise receiver letter, specify interface
2023-08-08 11:05:58 -04:00
Aleem Isiaka
ea1b8e95c6
Update debug.mdx (#21755)
Fix article usage

Co-authored-by: Violet Hynes <violet.hynes@hashicorp.com>
2023-08-08 10:58:37 -04:00
Steven Clark
64460dd58b
Refactor logic on applying leaf_not_after_behavior (#22230)
- Allow us to call and apply an issuer's leaf_not_after_behavior
   to a leaf certificate from various locations.
2023-08-08 13:39:54 +00:00
Adrian Ding
5c376701ff
Add 501 to Vault uninitialized (#22128)
* Add 502 to Vault uninitialized

* Update index.mdx

* Update index.mdx

---------

Co-authored-by: Violet Hynes <violet.hynes@hashicorp.com>
2023-08-08 09:22:49 -04:00
Yoko Hyakuna
a29b88b09f
Add an anchor link to policy override section (#22225) 2023-08-07 17:03:12 -07:00
Torbjørn Fjørtoft
20e2e4b308
Docs for Application Default Credentials, links to non-dwdoa setup (#21453) 2023-08-07 16:14:55 -07:00
Steven Clark
a1d0be3241
Send leaf_not_after_behavior as string not an integer - OSS (#22223) 2023-08-07 17:06:31 -04:00
Raymond Ho
0d0cda43d5
clarify docs in ldap/auth for userfilter (#22210) 2023-08-07 13:13:52 -07:00
Alexander Scheel
1268124584
Disaster Recovery Secondary nodes cannot handle API requests (#22217)
Signed-off-by: Alexander Scheel <alex.scheel@hashicorp.com>
2023-08-07 15:33:58 -04:00
claire bontempo
58bb5f0eb1
add ends in slash validator (#22218) 2023-08-07 12:31:57 -07:00
Rebecca Willett
6654c425d2
Pass consul license in Enos scenarios that have backend in the matrix (#22177) 2023-08-07 15:23:47 -04:00
Peter Wilson
43a3210003
Bump go-eventlogger to v0.2.2 (#22215) 2023-08-07 08:48:20 -04:00
Steven Clark
8a174b05b0
Add timeouts to ACME test contexts (#22205)
- The Golang ACME library will retry on failures until the passed in
   context times out. So if a test is broken it will never end until
   the context expires.
 - The timeouts are rather large to avoid some issues with slow CI
   runners, that have already triggered on a nightly 32 bit run
2023-08-04 11:09:37 -04:00
Steven Clark
3a46df2077
Use Hashicorp docker proxy for CI docker images (#22195)
* Use Hashicorp docker proxy for CI docker images

* Use library/consul as the mirror path instead of hashicorp/consul

 - Looks like the older 1.4.4 image was not published within the
   hashicorp/consul space, only newer images are.
 - Switch to library/consul which seems to have both versions
2023-08-03 13:42:20 -04:00
Sarah Chavis
689d556b09
remove stray slash (#22192) 2023-08-03 12:48:24 -04:00
Steven Clark
66052d5431
Refactor ACME for enterprise CIEPS integration (#22188) 2023-08-03 11:24:46 -04:00
Nick Cabatoff
72d8b95a49
Fix some duplication of partials, and add fix versions for update-primary data loss issue (#22182) 2023-08-03 10:28:03 -04:00
Nick Cabatoff
1e491e16d4
Draft docs for using docker testclusters. (#20397) 2023-08-03 09:54:20 -04:00
Nick Cabatoff
6b31e45317
Fix incorrect kv delete page description (#22178) 2023-08-02 15:35:58 -04:00
Paul Bowsher
e89bfb3c25
Fix typo in list-intermediates nav entry (#22109) 2023-08-02 19:27:09 +00:00
Nick Cabatoff
8a08331212
Bump go mod versions to match those in ent (#22172) 2023-08-02 15:10:32 -04:00
Victor Rodriguez
d59ed459e0
Bump google.golang.go/protobuf dependency to v1.31.0 (#22176)
Run `make proto` to update generated files.
2023-08-02 17:19:16 +00:00
Kushneryk Pavel
64f92b40fc
bug(20562): allowed_domains are compared case-sensitive if they use g… (#22126)
* bug(20562): allowed_domains are compared case-sensitive if they use glob patterns

* bug(20562): review fixes
2023-08-02 11:09:10 -04:00
Luis (LT) Carbonell
b8be31be9b
Split Changelog into Smaller Files (#22141)
* Replace older version text with tag links

* Split out v0 changelog

* Split out pre v1.10 changelog

* Link to previous versions

* fix newline

* add minor bumps

---------

Co-authored-by: akshya96 <87045294+akshya96@users.noreply.github.com>
2023-08-02 14:55:36 +00:00
Chelsea Shaw
569597aeb7
Docs: Update vault UI ember matrix (#22158)
* Update vault ui ember matrix

* Fill out all vault versions
2023-08-02 09:22:19 -05:00
Kuba Wieczorek
76d8ab6f43
CI: fix conditional statements for notification and test report collection jobs (#22157) 2023-08-02 13:40:24 +01:00
Sarah Chavis
acd0396721
Add version specific redirects for agent/proxy pages (#22127) 2023-08-01 14:07:41 -07:00
Victor Rodriguez
2a4351c08d
Add protobuf linter config necessary for vault-enterprise. (#22159) 2023-08-01 20:27:35 +00:00
Chelsea Shaw
8731cee07a
UI: Upgrade to Ember 4.12 (#22122) 2023-08-01 14:02:21 -05:00
Kyle Schochenmaier
1d01045e85
Docs/add imagepullsecrets example vso (#22136)
* Adds an example for imagepullsecrets to vso docs
2023-08-01 10:14:36 -05:00
akshya96
f3a4c01ba9
Remove "expiration manager is nil on tokenstore" error log for dr secondary (#22137)
* add check for dr secondary case

* add changelog
2023-07-31 14:06:28 -07:00
malinac02
7e6bb1fb7c
UI: Display minus icon for empty MaskedInput value. Show MaskedInput for KV secrets without values (#22039)
* changed MaskedInput to show a minus icon when there is no value. changed SecretFormShow to show this MaskedInput with minus icon instead of showing just a minus icon

* fixed copy button for blank value in MaskedInput; added changelog

* reword changelog to be more concise

* added test to check if minus icon shows for MaskedInput when value is empty string

* edited a test to make sytnax more concise

* changed MaskedInput to show 'danger' message when copying empty value

* added 2 tests to check for flash messages

* changed naming of a MaskedInput test to be more descriptive
2023-07-31 12:29:43 -07:00
Johan Brandhorst-Satzkorn
8253e59752
Migrate protobuf generation to Buf (#22099)
* Migrate protobuf generation to Buf

Buf simplifies the generation story and allows us to lean
into other features in the Buf ecosystem, such as dependency
management, linting, breaking change detection, formatting
and remote plugins.

* Format all protobuf files with buf

Also add a CI job to ensure formatting remains consistent

* Add CI job to warn on proto generate diffs

Some files were not regenerated with the latest version
of the protobuf binary. This CI job will ensure we are always
detect if the protobuf files need regenerating.

* Add CI job for linting protobuf files
2023-07-31 18:44:56 +00:00
Chris Capurso
c040f901e5
Vault 18005 plugin api lock status (#21925)
* add APILockShouldBlockRequest to backend proto

* make proto

* add APILockShouldBlockRequest to system view

* Revert "make proto"

This reverts commit 7f33733f185e8a7419590d82150e85abdcc5e707.

* Revert "add APILockShouldBlockRequest to backend proto"

This reverts commit a3bf41f7f2a0811dd323fbff4da45a582c942f2b.

* move APILockShouldBlockRequest to extended sys view

* add changelog entry
2023-07-31 12:58:20 -04:00
Adrian Ding
d83e8ed425
add 472 return code (#22105)
* add 472 return code

* Updated the wording for consistency

---------

Co-authored-by: Yoko Hyakuna <yoko@hashicorp.com>
2023-07-28 10:56:20 -07:00
Max Bowsher
fdc257d3a0
Fix bad test (#22118)
This test, trying to test KV v2 behaviour, should be sending its
requests to a KV v2! Not the KV v1!
2023-07-28 13:18:27 -04:00
Peter Wilson
30114d0038
Moved HeaderFormatter to an Option for NewEntryFormatter, updated tests (#22116) 2023-07-28 17:07:20 +01:00
Raymond Ho
4f7a8fb494
AWS auth login with multi region STS support (#21960) 2023-07-28 08:42:22 -07:00
Lars Lehtonen
194e8cdb02
tools/stubmaker: fix dropped error (#22112) 2023-07-28 14:57:52 +00:00
Ellie
032dd8fd7c
docs/mssql: update schema to be generic (#22101) 2023-07-28 09:45:14 -05:00