mirrors/vault
1
0
Fork 0
mirror of https://github.com/hashicorp/vault.git synced 2025-08-31 11:31:07 +02:00
Code Issues Projects Releases Wiki Activity
19,810 Commits 2,839 Branches 446 Tags
Commit Graph

1529 Commits

Author SHA1 Message Date
Peter Wilson
3f11c24c13
VAULT-23335: Audit - Exclusion Docs (Draft) (#26696) 
* Added exclusion draft docs

* added message to link exported types RequestEntry and ResponseEntry to website docs

* Update website/content/docs/enterprise/audit/exclusion.mdx

Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>

* Update website/content/docs/enterprise/audit/exclusion.mdx

Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>

* Update website/content/docs/enterprise/audit/exclusion.mdx

Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>

* Update website/content/docs/enterprise/audit/exclusion.mdx

Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>

* Update website/content/docs/enterprise/audit/exclusion.mdx

Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>

* Update website/content/docs/enterprise/audit/exclusion.mdx

Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>

* Update website/content/docs/enterprise/audit/exclusion.mdx

Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>

* Update website/content/docs/enterprise/audit/exclusion.mdx

Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>

* Update website/content/docs/enterprise/audit/exclusion.mdx

Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>

* Update website/content/docs/enterprise/audit/exclusion.mdx

Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>

* Update website/content/docs/enterprise/audit/exclusion.mdx

Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>

* Update website/content/docs/enterprise/audit/exclusion.mdx

Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>

* Update website/content/docs/enterprise/audit/exclusion.mdx

Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>

* `an` => `a`

* quotes

* Update website/content/docs/enterprise/audit/exclusion.mdx

Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>

* Update website/content/docs/enterprise/audit/exclusion.mdx

Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>

* Update website/content/docs/enterprise/audit/exclusion.mdx

Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>

* Update website/content/partials/audit-options-common.mdx

Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>

* JSON {} 'objects'

* condition is optional

* Update website/content/docs/enterprise/audit/exclusion.mdx

---------

Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>
 2024-06-11 08:39:54 +01:00
divyaac
ca9c4df71e
Deprecates current_billing_period (#27426) 
* Applied oss patches

* Added changelog

* Edited upgrade guide
 2024-06-10 14:33:38 -07:00
Scott Miller
de84d373c1
Document environment variable usage in Seal HA (#27421) 
* Document how environment variables work with seal names

* wording
 2024-06-10 11:37:59 -05:00
Mary Frances
0ca6fe9af2
Update mongodbatlas.mdx (#27395) 
Capitalize Atlas and add space in note.
 2024-06-10 10:44:03 -04:00
divyaac
59320bb60b
Deprecated default_report_months (#27350) 
* Deprecated default_report_months through docs and upgrade guides

* Added upgraade doc

* Update website/content/docs/upgrading/upgrade-to-1.18.x.mdx

Co-authored-by: Mike Palmiotto <mike.palmiotto@hashicorp.com>

* Update website/content/api-docs/system/internal-counters.mdx

Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>

* Update website/content/docs/upgrading/upgrade-to-1.18.x.mdx

Co-authored-by: Mike Palmiotto <mike.palmiotto@hashicorp.com>

* Update vault/logical_system_activity.go

Co-authored-by: Mike Palmiotto <mike.palmiotto@hashicorp.com>

* updated code sample

* Added changelog

* Update website/content/docs/upgrading/upgrade-to-1.18.x.mdx

Co-authored-by: Mike Palmiotto <mike.palmiotto@hashicorp.com>

* Update changelog/27350.txt

Co-authored-by: Mike Palmiotto <mike.palmiotto@hashicorp.com>

* Update website/content/docs/upgrading/index.mdx

Co-authored-by: Mike Palmiotto <mike.palmiotto@hashicorp.com>

* Update upgrade-to-1.18.x.mdx

* Update upgrade-to-1.18.x.mdx

* Added docs nav

* Edited docs nav

* Edited docs

---------

Co-authored-by: Mike Palmiotto <mike.palmiotto@hashicorp.com>
Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>
 2024-06-06 21:58:54 +00:00
Jonathan Frappier
ef10c1a2a4
Add TCP TLS guide (#27318) 
* Add TCP TLS guide

* Fix example listener stanza missing }

* Update website/content/docs/configuration/listener/tcp-tls.mdx

Co-authored-by: Jamie Finnigan <jfinnigan@hashicorp.com>

* Update website/content/docs/configuration/listener/tcp-tls.mdx

Co-authored-by: Jamie Finnigan <jfinnigan@hashicorp.com>

* Update website/content/docs/configuration/listener/tcp-tls.mdx

Co-authored-by: Jamie Finnigan <jfinnigan@hashicorp.com>

* Update website/content/docs/configuration/listener/tcp-tls.mdx

Co-authored-by: Jamie Finnigan <jfinnigan@hashicorp.com>

* Update website/content/docs/configuration/listener/tcp-tls.mdx

Co-authored-by: Jamie Finnigan <jfinnigan@hashicorp.com>

* Update website/content/docs/configuration/listener/tcp-tls.mdx

Co-authored-by: Jamie Finnigan <jfinnigan@hashicorp.com>

* Suggestions for TCP-TLS docs (#27335)

* recreating edits

* Fix nav entry

---------

Co-authored-by: Jamie Finnigan <jfinnigan@hashicorp.com>
Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>
 2024-06-05 09:48:10 -04:00
John-Michael Faircloth
b9a2f83019
docs: note vle is not supported with aws snapstart (#27329) 
* docs: note vle is not supported with aws snapstart

* Update website/content/docs/platform/aws/lambda-extension.mdx

Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>

---------

Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>
 2024-06-04 21:31:49 -07:00
vinay-gopalan
5acc4331ea
Add WIF documentation for Azure Auth and Secrets engines (#27185) 2024-06-03 13:17:13 -07:00
vinay-gopalan
01ccf580d8
Add WIF documentation for GCP Auth and Secrets engines (#27170) 
Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>
 2024-06-03 13:16:56 -07:00
Violet Hynes
1d87ed8aaf
Add docs and changelog for PR 9733 (#27313) 2024-06-03 14:09:57 -04:00
Violet Hynes
92e995c68e
Note that Vault Proxy is supported as a Windows Service (#27306) 
* Note that Vault Proxy is supported as a Windows Service

* Formatting
 2024-05-31 13:04:17 -04:00
JMGoldsmith
896e825549
known issue with autopilot upgrades (#27286) 
* known issue with autopilot upgrades

* Update releases

* Fix typo

* Fix typo

Co-authored-by: Ellie <ellie.sterner@hashicorp.com>

* Update 1.15.0.mdx

* Update 1.16.1.mdx

---------

Co-authored-by: Ellie <ellie.sterner@hashicorp.com>
Co-authored-by: Tony Wittinger <anwittin@users.noreply.github.com>
Co-authored-by: davidadeleon <56207066+davidadeleon@users.noreply.github.com>
 2024-05-31 12:39:34 -04:00
Ben Ash
5672937149
Update docs for VSO v0.7.1 (#27296) 2024-05-30 18:56:30 -04:00
Jonathan Frappier
92a4fde589
Add note about HVS secret sync (#27285) 
* Add note about HVS secret sync

* Update website/content/docs/sync/index.mdx

Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>

---------

Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>
 2024-05-30 16:21:51 -04:00
Seena Fallah
5c275e7d88
agent: allow changing file ownership in file sink (#27123) 
* agent: allow changing file ownership in file sink

Allow changing the ownership of the token file in file sink.

Signed-off-by: Seena Fallah <seenafallah@gmail.com>

* Consistency: id -> ID

* Add changelog

* Remove empty line in changelog

* agent: add godoc for TestFileSinkMode_Ownership

Signed-off-by: Seena Fallah <seenafallah@gmail.com>

---------

Signed-off-by: Seena Fallah <seenafallah@gmail.com>
Co-authored-by: Violet Hynes <violet.hynes@hashicorp.com>
 2024-05-30 15:11:37 -04:00
jeremyaranas-hashicorp
b8d482c2fa
Updated Sentinel replication namespace (#27214) 
Co-authored-by: Jonathan Frappier <92055993+jonathanfrappier@users.noreply.github.com>
 2024-05-30 12:03:16 -04:00
Lucy Davinhart || Strawb System
b5e58a73b0
Update raft.mdx (#27275) 2024-05-30 10:33:56 -04:00
Brian Shumate
39a0dea8ad
Docs: Add recommended patterns (#27257) 
* Docs: Add recommended patterns

- Create security folder
- Move security model to security folder as index page
- Add recommended patterns page to security folder
- Update navigation

* Add diagram content

* Rework navigation placement
 2024-05-29 11:06:16 -04:00
markafarrell
476b0d57c9
Add vault.agent.authenticated metric (#26570) 
* add vault.agent.authenticated metric

fix metric name

* Update command/agentproxyshared/auth/auth.go

---------

Co-authored-by: Violet Hynes <violet.hynes@hashicorp.com>
 2024-05-28 12:28:24 -04:00
Ben Ash
990a25aee2
Update docs for VSO v0.7.0 (#27245) 2024-05-27 19:52:55 -04:00
Roberto Hidalgo
6e72397a86
Allow setting of Consul ServiceMeta tags from config file (#11084) 
* Allow setting of Consul ServiceMeta tags from config file

probably a bad idea, let's see how it works
scaffold tests

* kick circleci

* Add links to consul docs

Co-authored-by: Violet Hynes <a.xenasis@gmail.com>

* add changelog note

* use relative developer docs links

* address feedback

* please linter

---------

Co-authored-by: Violet Hynes <violet.hynes@hashicorp.com>
 2024-05-27 16:28:10 -04:00
Luis (LT) Carbonell
8298e79e45
Add replication heartbeat metric docs (#27229) 2024-05-24 14:51:29 -04:00
Sarah Chavis
53ec4d5f7b
[DOCS] Manage resources with TF (#27171) 
---------

Co-authored-by: CJ <105300705+cjobermaier@users.noreply.github.com>
Co-authored-by: Brian Shumate <brianshumate@users.noreply.github.com>
 2024-05-24 09:55:27 -07:00
John-Michael Faircloth
f528036e45
docs: ldap secrets hierarchical paths (#27203) 
* docs: ldap secrets hierarchical paths

* changelog

* Apply suggestions from code review

Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>

* role_name => set_name

---------

Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>
 2024-05-24 09:10:59 -05:00
Ellie
7438d63f81
docs: document known issue sending sighup to ent standby node (#27155) 
* docs: document known issue sending sighup to ent standby node

* be more specific with cause of panic

* add partial to upgrade guides for 1.14, 1.15, 1.16
 2024-05-24 06:38:07 -05:00
miagilepner
d5e7ac934a
VAULT-24580: Add ACME to client count docs (#27040) 
* add acme client documentation

* add to all metrics

* add acme to current month response
 2024-05-24 11:30:32 +02:00
Milena Zlaticanin
309d832462
Add AWS Auth WIF docs (#27054) 
* add aws auth wif docs

* update docs

* update docs
 2024-05-23 12:58:08 -07:00
Adam Rowan
3d5a372ce3
Update interoperability-matrix.mdx (#27195) 
Updating to include a new Rubrik KMIP integration with Vault.
 2024-05-23 09:41:23 -07:00
Steven Clark
0bb3ddf7a7
Update cert metadata docs (#27025) 
* Update cert metadata docs

 - Add missing enterprise notices on parameters and titles
 - Mention that the metadata parameter is a base64 encoded string
 - Tweak the no_store_metadata description
 - Update some entries within the PKI considerations page

* Add serial_number to read certificate metadata sample response

* Update fields sign-verbatim is affected by the specified role
 2024-05-16 11:08:31 -04:00
Yoko Hyakuna
f12c5238db
[Docs] Point to the pricing page rather than the product page (#27026) 
* Point to the pricing page rather than the product page

* Empty-Commit

* Add 'appropriate' to the license statement

* Use the partial to mention about VE license

* Minor fix

* add newline

* Revert "add newline"

This reverts commit 64615cba08321b164027dd2d000a90a0d4979a02.

---------

Co-authored-by: Nels Andereck <nels.andereck@hashicorp.com>
 2024-05-15 17:49:01 -07:00
Mike Palmiotto
ecd164386c
Add a known issue for perf standby reverting to standby (#27062) 2024-05-15 17:49:40 -04:00
Jonathan Frappier
7bdc7c64bf
Fix broken MFA links, add links to bottom of page (#27061) 2024-05-15 17:24:47 -04:00
Sarah Chavis
8d2362364f
[DOCS] Correct code block language (#26996) 2024-05-13 16:39:20 -04:00
CJ
01c95e04ec
fix url to anti patterns (#26975) 2024-05-13 09:16:40 -07:00
CJ
5787c17b97
Docs/waf vault tf (#26515) 
---------

Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>
Co-authored-by: Chris Stella <chris.stella.84@gmail.com>
 2024-05-13 08:21:06 -07:00
Sarah Chavis
b38fdef012
Add reading guide for designing Vault clusters (#26947) 2024-05-10 17:41:32 -07:00
Daniel Greeninger
c87f1b90b5
Update limits.mdx (#26704) 
corrected typo
 2024-05-10 17:35:33 -07:00
Meggie
a5c9364c68
Added some notes about TLS and browser Secure Contexts (#26946) 
* Added some notes about TLS and browser Secure Contexts

* Fixed an unrelated indent and color for note

* Bolding word to add visual distinction
 2024-05-10 16:01:54 -04:00
Paul Banks
0a06215d1a
Documentation for Adaptive Overload Protection (#26690) 
* Document enabling config

* Fix nav data JSON after disabling over-zealous prettifier

* Address review feedback

* Add warning about reloading config during overload

* Bad metrics links

* Another bad link

* Add upgrade note about deprecation

---------

Co-authored-by: Mike Palmiotto <mike.palmiotto@hashicorp.com>
 2024-05-10 17:55:57 +01:00
Adam Rowan
6f946bc2af
Update interoperability-matrix.mdx (#26889) 
Updating the Interoperability Matrix to account for new Vault KMIP and transit integrations
 2024-05-09 11:20:49 -07:00
Peter Wilson
8778240665
VAULT-26466: audit - docs for including correlation ID headers by default (#26778) 
* Docs for correlation ID changes

* Updates

* Update website/content/docs/audit/index.mdx

Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>

* Update website/content/docs/audit/index.mdx

Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>

* Update website/content/docs/audit/index.mdx

Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>

* Update website/content/docs/audit/index.mdx

Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>

* Create upgrade 1.17 doc and add audit headers info

* Update website/content/docs/audit/index.mdx

Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>

* Update website/content/docs/audit/index.mdx

Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>

* Update website/content/docs/audit/index.mdx

Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>

* Update website/content/docs/upgrading/upgrade-to-1.17.x.mdx

Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>

---------

Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>
 2024-05-09 17:58:01 +00:00
Steven Clark
0637f5e316
PKI: Change sign-intermediate to truncate notAfter by default (behavior change) (#26796) 
* PKI: Change sign-intermediate to truncate notAfter by default

 - The PKI sign-intermediate API allowed an end-user to request a TTL
   value that would extend beyond the signing issuer's notAfter. This would
   generate an invalid CA chain when properly validated.
 - We are now changing the default behavior to truncate the returned certificate
   to the signing issuer's notAfter.
 - End-users can get the old behavior by configuring the signing issuer's
   leaf_not_after_behavior field to permit, and call sign-intermediary
   with the new argument enforce_leaf_not_after_behavior to true. The
   new argument could also be used to enforce an error instead of truncating
   behavior if the signing issuer's leaf_not_after_behavior is set to err.

* Add cl

* Add cl and upgrade note

* Apply suggestions from code review

Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>

---------

Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>
 2024-05-09 11:22:04 -04:00
Ellie
84d734d673
[docs] document known issue for azure secrets engine failing on role creation (#26881) 
* document known issue for azure secrets engine failing on role creation

* fix empty space

* remove new line

* add workaround

* remove space

---------

Co-authored-by: Tony Wittinger <anwittin@users.noreply.github.com>
 2024-05-09 09:48:22 -05:00
Steven Clark
fe2b4c6f7a
PKI: Allow operators to increase the maximum TTL for ACME issued certificates (#26797) 
* PKI: Allow operators to increase the maximum TTL for ACME issued certificates

* Add cl
 2024-05-09 10:41:28 -04:00
Steven Clark
259cfbf618
Add missing delegated_auth_accessors config field to /sys/mounts/<path> response (#26876) 
* Add missing delegated_auth_accessors config field to /sys/mounts/<path> response

 - The field hadn't been properly populated in the JSON struct being returned
   through the API response, but had been properly set in the stored structs
   in the backend.
 - Add missing update to the command tune docs for the -delegated-auth-accessors
   option that existed
 - Add -delegated-auth-accessors to the secret enable vault command along with
   a docs update

* Add cl

* Fix documentation, using a comma separated list does not work

* Apply suggestions from code review

Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>

* Drop plural on doc update

---------

Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>
 2024-05-08 19:58:46 +00:00
Peter Wilson
e9e79b4c16
Tweak text to clarify (#26804) 2024-05-07 11:42:07 +01:00
Meggie
f298ef763a
Fix docker image in developer quickstart (#26805) 
We were pointing to the deprecated official images (https://hub.docker.com/_/vault) instead of the verified publisher images (https://hub.docker.com/r/hashicorp/vault) which is the one we publish `latest` to.

See also https://github.com/hashicorp/vault/pull/23581
 2024-05-06 11:22:25 -04:00
benz0
758c967369
Update tcp.mdx (#26816) 
per customer request in support ticket #141025 I've updated the description of tls_disable_client_certs to provide clarification.

previous pr for this change was approved but needed to be resubmitted because of problems with my GH account.  See #26601
 2024-05-06 11:03:13 -04:00
Robert
1bfc4f90eb
Adjust sync clients reference link (#26818) 2024-05-03 15:37:55 -05:00
Violet Hynes
f2b4ca4def
VAULT-24736 CE changes for static secret capability behaviour toggle (#26744) 2024-05-03 14:12:19 -04:00