20405 Commits

Author SHA1 Message Date
Noelle Daley
61a37f2723
UI: fix token expiry banner for batch tokens (#27479)
* fix: calculate expiration of all batch tokens to ensure expire warning banner is shown

* fix: ensure allowExpiration doesn't get overridden

* fix: set expirationCalcTS outside of calculateExpression

* tests: verify expirationEpoch is calculated when only expiry_time is passed in

* fix: calculate expireTime using expire_time if its passed in

* tests: clean up auth tests

* tests: organize batch token vs. service token tests into separate module

* chore: update changelog

* Update changelog/27479.txt

Co-authored-by: Chelsea Shaw <82459713+hashishaw@users.noreply.github.com>

* fix: ensure tokens in test envs do not expire

* cleanup: pull setExpiration settings into own method & add tests

---------

Co-authored-by: Chelsea Shaw <82459713+hashishaw@users.noreply.github.com>
2024-06-28 01:05:53 +00:00
dependabot[bot]
93bda36235
Bump actions/add-to-project from 1.0.1 to 1.0.2 (#27584)
Bumps [actions/add-to-project](https://github.com/actions/add-to-project) from 1.0.1 to 1.0.2.
- [Release notes](https://github.com/actions/add-to-project/releases)
- [Commits](9bfe908f2e...244f685bbc)

---
updated-dependencies:
- dependency-name: actions/add-to-project
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Violet Hynes <violet.hynes@hashicorp.com>
2024-06-27 18:48:58 +00:00
Angel Garbarino
84aeec0513
Create sections for Secrets sync destination fields for create/edit view (#27538)
* initial shuffling of credentials and advanced configuration options

* update all destination models

* wip changelog

* Update 27538.txt

* remove custom_tags from gh

* missed vercel and remove custom_tags from base

* refactor conditional logic on templace

* things

* test coverage and dynamic subText

* add assert to not see enableInput on create

* clean up

* remove extra parens

* test clean up to clarify what the header subtext vs breadcrumb transition are testing
2024-06-27 12:46:24 -06:00
dependabot[bot]
281f6931b0
Bump test-summary/action from 2.3 to 2.4 (#27626)
Bumps [test-summary/action](https://github.com/test-summary/action) from 2.3 to 2.4.
- [Release notes](https://github.com/test-summary/action/releases)
- [Commits](032c8a9cec...31493c76ec)

---
updated-dependencies:
- dependency-name: test-summary/action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Violet Hynes <violet.hynes@hashicorp.com>
2024-06-27 18:44:29 +00:00
John-Michael Faircloth
c812b8b15a
docs: update fix versions for auth/jwt change (#27630) 2024-06-27 12:32:44 -05:00
John-Michael Faircloth
41bb992c32
docs: update auth/jwt changelog for 1.16.5 and 1.15.11 (#27629) 2024-06-27 17:15:01 +00:00
Tom Chwojko-Frank
c18e603d67
Updated changelog for 1.17.1, 1.16.5, and 1.15.11 releases (#27625) 2024-06-27 08:45:34 -07:00
Robert
5f4a0deb77
Add product name to relative link (#27624) 2024-06-26 16:07:03 -07:00
Robert
11bb553475
Document token format/prefix differences in the token concepts page (#27562)
* Update tokens.mdx

* Change wording from 2 token types to 3 types
2024-06-26 22:56:17 +00:00
claire bontempo
89ebef0b5e
delete outdated yarnrc file (#27622) 2024-06-26 15:26:52 -07:00
Adam Rowan
41caa2d014
Update interoperability-matrix.mdx (#27618)
Adding a new Vault KMIP integration listing with Dell PowerProtect DDOS 8.0
2024-06-26 13:00:18 -07:00
Robert
f8631d1faa
Update docs wording with example for static role rotation of access keys for AWS IAM Users (#27572)
* Give an example for maximum number of keys with IAM Users

* Update aws.mdx
2024-06-26 12:38:30 -05:00
Violet Hynes
62e6b062f0
VAULT-28422 SDK upversion for go-retryablehttp (#27612) 2024-06-26 11:25:55 -04:00
Violet Hynes
037d82130c
VAULT-28422 Upgrade go-retryablehttp for CE (#27602) 2024-06-26 09:05:02 -04:00
miagilepner
69e919fe11
Docs: clarify cluster name usage (#27587)
* clarify cluster name usage

* add update line
2024-06-26 13:41:14 +02:00
Peter Wilson
89276a56b2
VAULT-6803: fix listener issue if using proxy_protocol_behavior with deny_unauthorized for untrusted upstream connections (#27589)
* timeout 'testListenerConnFn' waiting on the server connection after 3 secs

* return the invalid upstream error so the library knows not to stop listening/serving

* update go-proxyproto to use fork/tag

* test that fails before library and code update, but passes afterwards
2024-06-26 07:52:13 +00:00
Noelle Daley
aa828f1e29
UI: allow retries for MFA form errors (#27574)
* mfa-form: fix regex matching so error msg displays

* changelog

* chore: add comments
2024-06-25 23:49:20 +00:00
Ryan Cragun
ad5ca3e7b7
actions: use the Github API for pull request labels (#27603)
We have seen instances where the github.event.pull_request.labels.*.name
context in Github Actions doesn't actually include the labels.

Instead, we now pull and parse them ourselves instead of relying on that
context.

Signed-off-by: Ryan Cragun <me@ryan.ec>
2024-06-25 16:32:12 -06:00
AvivGuiser
3372a9b4db
secrets/database: Add usePrivateIP field for cloudsql postgresql instances (#26828)
* add usePrivateIP params to determine if to use private ip dial option

Signed-off-by: aviv guiser <avivguiser@gmail.com>

* fix the connection_producer.go in mysql plugin

Signed-off-by: aviv guiser <avivguiser@gmail.com>

* Update sdk/database/helper/connutil/sql.go

Co-authored-by: Robert <17119716+robmonte@users.noreply.github.com>

---------

Signed-off-by: aviv guiser <avivguiser@gmail.com>
Signed-off-by: AvivGuiser <aviv.guiser@placer.ai>
Co-authored-by: Robert <17119716+robmonte@users.noreply.github.com>
2024-06-25 14:17:13 -05:00
Ben Ash
bf878c4248
Docs: update supported K8s versions for 1.30 (#27595) 2024-06-25 13:57:30 -04:00
Peter Wilson
ad1b5dfcd6
Docs: fix listener 'proxy_protocol_behavior' support version 1 and 2 (#27594)
* fix listener 'proxy_protocol_behavior' docs to mention support for v1 and v2

* Update website/content/docs/configuration/listener/tcp/index.mdx

Co-authored-by: Violet Hynes <violet.hynes@hashicorp.com>

---------

Co-authored-by: Violet Hynes <violet.hynes@hashicorp.com>
2024-06-25 16:36:29 +00:00
Mike Palmiotto
93682b0547
Prepare CE changes for [census.Agent] SetMetadata (#27577) 2024-06-25 10:41:56 -04:00
Kuba Wieczorek
c51bdac2c1
[VAULT-27978] Increase writer request timeout from 500ms to 3s in TestConsulFencing_PartitionedLeaderCantWrite to fix flakiness in CI (#27590) 2024-06-25 14:09:44 +01:00
Ryan Cragun
e0199efb19
ui: pin chrome in UI tests (#27580)
* ui: pin chrome in UI tests

Signed-off-by: Ryan Cragun <me@ryan.ec>
2024-06-24 14:16:07 -06:00
Noelle Daley
4e02a7a673
UI: fix flaky form-related integration tests (#27537)
* tests: await settled after calling cancelTimers to fix flakiness

* chore: don't use assert.ok

* tests: fix flaky mfa-test
2024-06-21 23:49:54 +00:00
Ryan Cragun
89e9e0f2cd
VAULT-28307 enos: allow arm64 fips1402 and hsm editions (#27571)
In preperation for arm64 builds of hsm, fips1402, and hsm.fips1402
editions of Vault Enterprise we'll allow them in our test scenarios.

Signed-off-by: Ryan Cragun <me@ryan.ec>
2024-06-21 15:24:46 -06:00
davidadeleon
45682dc090
VAULT-28281: Pass in accountName variable into validation function (#27563)
* pass in correct accountName variable into validation function

* modify test fixture to better test validation functionality

* pass in accountName variable into error message

* changelog
2024-06-21 15:09:07 -04:00
claire bontempo
7187b6f2c3
update package ent command and docfy readme (#27565) 2024-06-21 11:45:24 -07:00
claire bontempo
6f00ce45d2
UI: remove current_billing_period from dashboard activity log request (#27559)
* remove current_billing_period from dashboard request

* add changelog

* remove timestamp from assertion

* update mirage
2024-06-21 11:06:53 -07:00
Robert
5f078e2d39
Add chroot known-issue and sync activation-flag release note (#27558)
* Add chroot known-issue and activation-flag release note

* Fix reference link
2024-06-21 13:05:12 -05:00
claire bontempo
2482674312
UI: Create starter Auth::Page component (#27478)
* move OktaNumberChallenge and AuthForm to AuthPage component

* return from didReceiveAttrs if component is being torn down

* update auth form test

* change passed task to an auth action

* update auth form unit test

* fix return

* update jsdoc for auth form

* add docs

* add comments, last little cleanup, pass API error to okta number challenge

* separate tests and move Auth::Page specific logic out of auth form integration test

* fix test typos

* fix page tests
2024-06-20 12:40:28 -07:00
davidadeleon
d4da61fc4e
CE side change for vault-24636 (#26675) 2024-06-20 14:46:01 -04:00
Sarah Chavis
d23db14c46
[DOCS: SPE-827] Add autopilot known issue to 1.15 docs and 1.16/1.17 release notes (#27454)
* Update 1.15 docs with autopilot known issue

* add autopilot issue to 1.16 and 1.17 release notes as known issue
2024-06-20 10:48:30 -07:00
John-Michael Faircloth
25438b2238
docs: clarify auth jwt upgrade guide versions (#27552) 2024-06-20 12:34:44 -05:00
miagilepner
9af5c5c933
add new clients to namespace counts (#27549) 2024-06-20 13:23:52 +00:00
miagilepner
36affc2fd2
VAULT-28024: Current month new clients by namespace and mount (#27527) 2024-06-20 11:58:40 +02:00
Jacob Henner
46a41a549b
Specify headers by environment variable (#21993)
* Specify headers by environment var

* Add changelog entry

* Add tests, docs

* Formatting

---------

Co-authored-by: Violet Hynes <violet.hynes@hashicorp.com>
2024-06-19 16:51:24 -04:00
Violet Hynes
3959722892
VAULT-28192 fix Agent and Proxy consuming large amounts of CPU for auto-auth self-healing (#27518)
* VAULT-28192 fix Agent and Proxy consuming large amounts of CPU for auto-auth self-healing

* Changelog

* Update changelog

* drain incoming if we get invalid token

---------

Co-authored-by: Jason O'Donnell <2160810+jasonodonnell@users.noreply.github.com>
2024-06-19 10:23:51 -04:00
Adrian Todorov
e7f2107b52
clarify the JWT auth bound_audiences change in behaviour (#27541) 2024-06-19 08:56:45 -05:00
John-Michael Faircloth
ab08d623e8
docs: add note to jwt auth for bound aud changes (#27530) 2024-06-19 08:35:22 -05:00
Angel Garbarino
66e78db425
Mask obfuscated Secret sync create/edit fields (#27348)
* wip not working on edit view

* changelog

* vercel and fix tests

* need conditional to not break all the things:

* create test coverage and add for other obfustcaed fonts, still missing one.

* Update 27348.txt

* remove meep

* comment

* test coverage
2024-06-18 14:20:22 -06:00
Mike Palmiotto
027888be73
sdk: Bump grpc version to 1.64.0 (#27532) 2024-06-18 15:41:45 -04:00
Robert
b48045fd98
Add sync paths to restricted list (#27428)
* Fix sync config path

* Use full sync activate path
2024-06-18 13:59:28 -05:00
Peter Wilson
4078417016
Audit: check if context is already cancelled when assessing viability for audit (#27531)
* check if context is already cancelled when assessing viability for audit

* changelog
2024-06-18 18:57:18 +00:00
Thy Ton
28c2e94382
replace global vault handlers with newVaultHandlers() (#27515) 2024-06-18 15:17:40 +00:00
Violet Hynes
ff8442dff7
VAULT-28192 Add known issue for Agent/Proxy CPU issue (#27520)
* VAULT-28192 Add known issue for Agent/Proxy CPU issue

* Remove version column

* Add versions to other rows
2024-06-18 09:25:23 -04:00
divyaac
499d84c4f2
Added method to join PQ and current month, with tests (#27503)
* Added method to join PQ and current month, with tests

* Edited test and added go doc

* Cleanup test
2024-06-18 09:48:26 +05:30
Jason O'Donnell
fe1f36a1dc
Add SIGUSR2 pprof to agent and proxy (#27510)
* Add SIGUSR2 pprof to agent

* changelog

* Update command/agent.go

Co-authored-by: Violet Hynes <violet.hynes@hashicorp.com>

* Update command/agent.go

Co-authored-by: Violet Hynes <violet.hynes@hashicorp.com>

* Add to proxy, update tests

* Fix path

* Changelog

* dry

* choose one error style

---------

Co-authored-by: Violet Hynes <violet.hynes@hashicorp.com>
2024-06-17 17:10:00 +00:00
Chelsea Shaw
299cd3d1f7
UI: Refactor replication tests (#27519)
* create page component for mode/index

* add test selector to replication summary

* use new component on replication/mode/index route

* Update flaky test

* copyright headers
2024-06-17 12:08:04 -05:00
Peter Wilson
b2ac030593
temp directory not used in a few places, switched to using testify require to clean up (#27512) 2024-06-17 10:53:31 +01:00