20405 Commits

Author SHA1 Message Date
Brian Shumate
9e64619c88
Update redirect (#28299) 2024-09-05 14:53:37 -04:00
hc-github-team-secure-vault-core
9c5d3ffc85
Update vault-plugin-auth-azure to v0.19.0 (#28294)
* Update vault-plugin-auth-azure to v0.19.0

* Add changelog

---------

Co-authored-by: hc-github-team-secure-vault-ecosystem <hc-github-team-secure-vault-ecosystem@users.noreply.github.com>
Co-authored-by: Milena Zlaticanin <60530402+Zlaticanin@users.noreply.github.com>
2024-09-05 09:54:12 -07:00
hc-github-team-secure-vault-core
65bc18b2e9
Update vault-plugin-database-redis-elasticache to v0.5.0 (#28293)
* Update vault-plugin-database-redis-elasticache to v0.5.0

* Add changelog

---------

Co-authored-by: hc-github-team-secure-vault-ecosystem <hc-github-team-secure-vault-ecosystem@users.noreply.github.com>
Co-authored-by: Milena Zlaticanin <60530402+Zlaticanin@users.noreply.github.com>
2024-09-05 09:30:32 -07:00
Angel Garbarino
92d585510c
replace placeholder (#28291) 2024-09-05 10:09:09 -06:00
Theron Voran
ffb88e93ce
sdk: update to docker v26.1.5 (#28269)
Updates to plugincontainer@v0.4.0 in sdk/, and
vault-testing-stepwise@v0.3.1 in root, which updates vault/sdk and
vault itself to docker v26.1.5.
2024-09-05 15:51:25 +00:00
Peter Wilson
322cb27395
Audit: always use derived context for audit logging, increase timeout to 10s (#28286)
* always use derived context for audit logging, increase timeout to 10secs max

* improve go doc

* changelog
2024-09-05 16:34:18 +01:00
Mike Palmiotto
6069e665c0
sdk: go mod tidy (#28290) 2024-09-05 15:24:02 +00:00
hc-github-team-secure-vault-core
b9c66c0809
Update vault-plugin-secrets-kubernetes to v0.9.0 (#28287)
* Update vault-plugin-secrets-kubernetes to v0.9.0

* Add changelog

---------

Co-authored-by: hc-github-team-secure-vault-ecosystem <hc-github-team-secure-vault-ecosystem@users.noreply.github.com>
2024-09-05 10:08:28 -04:00
Peter Wilson
3be1719c71
add auth and secret block to response test for hmac (#28283) 2024-09-05 12:26:53 +01:00
Scott Miller
047ec756c0
Document CMPv2 (#27915)
* CMPv2 Documentation, and restructuring of Issuance Protocols into its own section for PKI.

* title

* CMPv2 API

* Add default path policy

* Update website/content/docs/secrets/pki/cmpv2.mdx

Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>

* Update website/content/docs/secrets/pki/cmpv2.mdx

Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>

* Update website/content/docs/secrets/pki/cmpv2.mdx

Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>

* Update website/content/docs/secrets/pki/cmpv2.mdx

Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>

* respond to some PR feedback

* pr feedback

* Fix nav and add key_usage

* Update website/content/docs/secrets/pki/cmpv2.mdx

Co-authored-by: Steven Clark <steven.clark@hashicorp.com>

* Update website/content/docs/secrets/pki/cmpv2.mdx

Co-authored-by: Steven Clark <steven.clark@hashicorp.com>

* Update website/content/api-docs/secret/pki/issuance.mdx

Co-authored-by: Steven Clark <steven.clark@hashicorp.com>

* Docs fixes

---------

Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>
Co-authored-by: Steven Clark <steven.clark@hashicorp.com>
2024-09-04 17:24:50 -05:00
hc-github-team-secure-vault-core
f6701b3672
Update vault-plugin-database-elasticsearch to v0.16.0 (#28277)
* Update vault-plugin-database-elasticsearch to v0.16.0

* Add changelog

---------

Co-authored-by: hc-github-team-secure-vault-ecosystem <hc-github-team-secure-vault-ecosystem@users.noreply.github.com>
Co-authored-by: Milena Zlaticanin <60530402+Zlaticanin@users.noreply.github.com>
2024-09-04 14:45:16 -07:00
claire bontempo
1238a187df
UI: address test flakiness, especially kmip role edit form (#28262)
* absolute hail mary

* what about this?

* that was not right

* nope

* refactor problematic test

* remove all of the runloop stuff, just chasing flaky tests

* chasing authPage

* move away from page objects for runCmd

* replace existing runCmd function

* add line

* test if removing chrome version helps this time?

* rerun tests

* rerun tests

* Revert "test if removing chrome version helps this time?"

This reverts commit 0b189c4f6978d6c55c283e3fe9fddd03d28c4377.

* remove await

* add trace log

* change test:oss command

* remove log tracing
2024-09-04 14:16:09 -07:00
hc-github-team-secure-vault-core
690520ad1b
Update vault-plugin-database-snowflake to v0.12.0 (#28275)
* Update vault-plugin-database-snowflake to v0.12.0

* Add changelog

---------

Co-authored-by: hc-github-team-secure-vault-ecosystem <hc-github-team-secure-vault-ecosystem@users.noreply.github.com>
2024-09-04 19:40:48 +00:00
hc-github-team-secure-vault-core
68238ad424
Update vault-plugin-secrets-alicloud to v0.18.0 (#28271)
* Update vault-plugin-secrets-alicloud to v0.18.0

* Add changelog

---------

Co-authored-by: hc-github-team-secure-vault-ecosystem <hc-github-team-secure-vault-ecosystem@users.noreply.github.com>
2024-09-04 14:13:33 -05:00
hc-github-team-secure-vault-core
3ecc513d34
Update vault-plugin-database-mongodbatlas to v0.13.0 (#28268)
* Update vault-plugin-database-mongodbatlas to v0.13.0

* Add changelog

---------

Co-authored-by: hc-github-team-secure-vault-ecosystem <hc-github-team-secure-vault-ecosystem@users.noreply.github.com>
Co-authored-by: Milena Zlaticanin <60530402+Zlaticanin@users.noreply.github.com>
2024-09-04 09:55:05 -07:00
hc-github-team-secure-vault-core
61463f591e
Update vault-plugin-secrets-azure to v0.20.0 (#28267)
* Update vault-plugin-secrets-azure to v0.20.0

* Add changelog

---------

Co-authored-by: hc-github-team-secure-vault-ecosystem <hc-github-team-secure-vault-ecosystem@users.noreply.github.com>
2024-09-04 09:31:47 -07:00
hc-github-team-secure-vault-core
42164dfc51
Update vault-plugin-auth-cf to v0.19.0 (#28266)
* Update vault-plugin-auth-cf to v0.19.0

* Add changelog

---------

Co-authored-by: hc-github-team-secure-vault-ecosystem <hc-github-team-secure-vault-ecosystem@users.noreply.github.com>
2024-09-04 16:28:16 +00:00
hc-github-team-secure-vault-core
07dfe7716a
Update vault-plugin-auth-kerberos to v0.13.0 (#28264)
* Update vault-plugin-auth-kerberos to v0.13.0

* Add changelog

---------

Co-authored-by: hc-github-team-secure-vault-ecosystem <hc-github-team-secure-vault-ecosystem@users.noreply.github.com>
2024-09-04 15:18:20 +00:00
crystalstall
8dee06f977
chore: fix some function names (#28251)
Signed-off-by: crystalstall <crystalruby@qq.com>
2024-09-04 09:38:52 -04:00
Steven Clark
789f9b7821
Add missing revocation storage lock on RevokeCert refactoring (#28259)
* Add missing revocation storage lock on RevokeCert refactoring

* Refactor internal PKI revocation API

 - Process the odd logical.Response/error returns internally to make
   the returns better consumable from other users.
 - Leverage the GetConfigWithUpdate to fetch the current CRL config, otherwise we can use older or nil configs.
2024-09-03 17:18:30 -04:00
hc-github-team-secure-vault-core
6bda443807
Update vault-plugin-auth-alicloud to v0.19.0 (#28263)
* Update vault-plugin-auth-alicloud to v0.19.0

* Add changelog

---------

Co-authored-by: hc-github-team-secure-vault-ecosystem <hc-github-team-secure-vault-ecosystem@users.noreply.github.com>
2024-09-03 20:49:44 +00:00
claire bontempo
de87c7f3c0
add isPatchAllowed to jsdoc (#28260) 2024-09-03 14:48:36 -05:00
claire bontempo
3a9db72792
UI: improve control group UX (#28232)
* wip control group fix?

* dont rely on models for capabilities;

* Revert "wip control group fix?"

This reverts commit cf3e896ba05d2fdfe1f6287bba5c862df4e5d553.

* make explicit request for data

* remove dangerous triple curlies

* cleanup template logic and reuse each-in

* remove capability checks from model

* update tests to reflect new behavior

* add test coverage

* fix mirage factory, update details tests

* test control groups VAULT-29471

* finish patch test

* alphabetize!

* does await help?

* fix factory

* add conditionals for control group error
2024-09-03 10:49:41 -07:00
miagilepner
ff7309573f
VAULT-27398: (TOB) remove / prefixes in sanitizePath (#28255) 2024-09-03 17:43:46 +02:00
Chelsea Shaw
5f2cedb4b9
UI: update expected OpenAPI attrs for test (#28242)
* update expected OpenAPI attrs

* Add key-usage field to form

* undo add to page

---------

Co-authored-by: claire bontempo <68122737+hellobontempo@users.noreply.github.com>
2024-09-03 09:45:32 -05:00
Peter Wilson
a7026acef9
remove multierror package - from entry formatter (#28253) 2024-09-03 12:00:15 +01:00
Meggie
aea2151dc3
Adding known issue writeup for audit log bug (#28247)
* Create 1_17_audit-log-hmac.mdx

* add to 1.17 notes

* add to 1.16 upgrade notes
2024-08-30 21:57:20 -04:00
Tony Wittinger
fcd6ef2731
Update CHANGELOG.md (#28246) 2024-08-31 01:25:53 +00:00
Chelsea Shaw
11fc622c4b
Correctly check for top ns == root (#28241) 2024-08-30 15:26:35 -05:00
davidadeleon
259b3ac9ec
VAULT-29658: Docs update for AOP (#28238)
* docs change

* Update website/content/docs/concepts/adaptive-overload-protection/index.mdx

Co-authored-by: Paul Banks <pbanks@hashicorp.com>

* Update website/content/docs/concepts/adaptive-overload-protection/index.mdx

Co-authored-by: Paul Banks <pbanks@hashicorp.com>

* Update website/content/docs/concepts/adaptive-overload-protection/index.mdx

Co-authored-by: Paul Banks <pbanks@hashicorp.com>

* adjust some replication verbiage

---------

Co-authored-by: Paul Banks <pbanks@hashicorp.com>
2024-08-30 16:08:24 -04:00
Chris Capurso
5b79c078c3
Activity Export API doc updates (#28172)
* remove export from restricted endpoints

* enhance activity export JSON examples

* fix nulls

* add missing local_entity_alias fields

* add JSON and CSV response examples

* Simplify namespace filtering concept

Co-authored-by: Violet Hynes <violet.hynes@hashicorp.com>

---------

Co-authored-by: Violet Hynes <violet.hynes@hashicorp.com>
2024-08-30 14:43:17 -04:00
akshya96
06fac16a1e
Add maximum request duration (timeouts) for all requests except actual monitor and events requests (#28230)
* fix paths for sys/monitor and sys/events

* add changelog

* add changelog

* Update http/handler.go

Co-authored-by: Violet Hynes <violet.hynes@hashicorp.com>

* added some modifications to check for timeout

---------

Co-authored-by: Violet Hynes <violet.hynes@hashicorp.com>
2024-08-30 11:00:12 -07:00
divyaac
8e1db67f6f
Added some documentation (#28225)
* Added some documentation

* Fix typo
2024-08-30 10:08:03 -07:00
Kit Haines
edf6851eb4
Key Usage Enablement for Ent-Feature CMPv2 (#28237)
* Key Usage Enablement for Ent-Feature CMPv2
2024-08-30 17:05:20 +00:00
JMGoldsmith
9ba5437ab5
adding some code (#28236) 2024-08-30 17:19:25 +01:00
Paul Banks
bb5f658c57
Allow explicit metric registration. Fixes #11732 (#27966)
* Register ha timing metrics. Fixes #11732

* Add CHANGELOG

* Fix copywrite headers

* Relicence SDK files after move

* Update vault/ha.go
2024-08-30 14:54:57 +00:00
Adam Rowan
cef5fce1e2
Update interoperability-matrix.mdx (#28231)
Small update to include new Private Machines HSM integration with Vault
2024-08-30 10:36:01 -04:00
Violet Hynes
bc7923ad29
VAULT-30219 Bug fix for race condition (#28228) 2024-08-30 09:45:58 -04:00
miagilepner
b5621aa368
VAULT-28477 Bootstrap and persist autopilot versions (#28186)
* add versions to raft bootstrap answer

* remove version faking

* save version state to storage

* logging and copy

* changelog

* use leader versions on upgrade

* add enterprise cluster test

* never drop persisted states

* rename to partialCopy, fix comment, fix log line
2024-08-30 08:32:26 +00:00
claire bontempo
f634808ed4
UI: Implement KV patch+subkey [enterprise] (#28212)
* UI: Implement overview page for KV v2 (#28162)

* build json editor patch form

* finish patch component and tests

* add tab to each route

* and path route

* add overview tab to tests

* update overview to use updated_time instead of created_time

* redirect relevant secret.details to secret.index

* compute secretState in component instead of pass as arg

* add capabilities service

* add error handling to fetchSubkeys adapter request

* add overview tabs to test

* add subtext to overview card

* remaining redirects in secret edit

* remove create new version from popup menu

* fix breadcrumbs for overview

* separate adding capabilities service

* add service to kv engine

* Revert "separate adding capabilities service"

This reverts commit bb70b12ab7dbcde0fbd2d4d81768e5c8b1c420cc.

* Revert "add service to kv engine"

This reverts commit bfa880535ef7d529d7610936b2c1aae55673d23f.

* update navigation test

* consistently navigate to secret.index route to be explicit

* finish overview navigation tests

* add copyright header

* update delete tests

* fix nav testrs

* cleanup secret edit redirects

* remove redundant async/awaits

* fix create test

* edge case tests

* secret acceptance tests

* final component tests

* rename kvSecretDetails external route to kvSecretOverview

* add comment

* UI: Add patch route and implement Page::Secret::Patch page component (sidebranch) (#28192)

* add tab to each route

* and path route

* add overview tab to tests

* update overview to use updated_time instead of created_time

* redirect relevant secret.details to secret.index

* compute secretState in component instead of pass as arg

* add capabilities service

* add error handling to fetchSubkeys adapter request

* add patch route and put in page component

* add patch secret action to subkeys card

* fix component name

* add patch capability

* alphabetize computed capabilities

* update links, cleanup selectors

* fix more merge conflict stuff

* add capabilities test

* add models to patch link

* add test for patch route

* rename external route

* add error templates

* make notes about enterprise tests, filter one

* remove errors, transition (redirect) instead

* redirect patch routes

* UI: Move fetching secret data to child route (#28198)

* remove @secret from metadata details

* use metadata model instead of secret in paths page

* put delete back into kv/data adapter

* grant access in control group test

* update metadata route and permissions

* remove secret from parent route, only fetch in details route

* change more permissions to route perms, add tests

* revert overview redirect from list view

* wrap model in conditional for perms

* remove redundant canReadCustomMetadata check

* rename adapter method

* handle overview 404

* remove comment

* add customMetadata as an arg

* update grantAccess in test

* make version param easier to follow

* VAULT-30494 handle 404 jira

* refactor capabilities to return an object

* update create tests

* add test for default truthy capabilities

* remove destroy-all-versions from kv/data adapter

* UI: Add enterprise checks (#28215)

* add enterprise check for subkey card

* add max height and scroll to subkey card

* only fetch subkeys if enterprise

* remove check in overview

* add test

* Update ui/tests/integration/components/kv/page/kv-page-overview-test.js

* fix test failures (#28222)

* add assertion

* add optional chaining

* create/delete versioned secret in each module

* wait for transition

* add another waitUntil

* UI: Add patch latest version to toolbar (#28223)

* add patch latest version action to toolbar

* make isPatchAllowed arg all encompassing

* no longer need model check

* use hash so both promises fire at the same time

* add subkeys to policy

* Update ui/lib/kv/addon/routes/secret.js

* add changelog

* small cleanup items! (#28229)

* add conditional for enterprise checking tabs

* cleanup fetchMultiplePaths method

* add test

* remove todo comment, ticket created and design wants to hold off

* keep transition, update comments

* cleanup tests, add index to breadcrumbs

* add some test coverage

* toggle so value is readable
2024-08-29 16:38:39 -07:00
Chelsea Shaw
4de1c697a2
UI: fix DB Postgres test (#28227) 2024-08-29 16:26:16 -05:00
vinay-gopalan
b6015de314
add oss check on tests (#28226) 2024-08-29 20:05:54 +00:00
Luciano Di Lalla
1ab4ed0da3
Update CHANGELOG.md for 1.17.4 1.16.8 and 1.15.14 (#28224) 2024-08-29 15:05:54 -04:00
Angel Garbarino
3abca46464
WIF sidebranch (#28148)
* manual cherry pick to deal with all the merge things

* changelog

* test fixes

* Update 28148.txt

* fix tests failures after main merge

* fix test failures after main merge

* Add Access Type and conditionally render WIF fields (#28149)

* initial work.

* remove access_type

* better no model logic well kind of

* rollback attrs

* remove defaults

* stopping point

* wip changing back to sidebranch

* hustling shuffling and serializing

* some of the component test coverage

* disable acces type if editing

* test coverage

* hide max retries that sneaky bugger

* cleanup

* cleanup

* Update root-config.js

* remove flash message check, locally passes great but on ci flaky

* clean up

* thank you chelsea

* test clean up per enterprise vs community

* address pr comments

* welp a miss add

* UI (sidebranch) WIF Issuer field (#28187)

* Add type declaration files for aws config models

* use updated task syntax for save method on configure-aws

* fix types on edit route

* fetch issuer on configure edit page if aws + enterprise

* track issuer within configure-aws component

* add placeholder support on form-field

* Add warning if issuer changed from previous value or could not be read

* cleanup

* preliminary tests

* dont use while loop so we can test the modal

* tests

* cleanup

* fix tests

* remove extra tracked value and duplicate changed attrs check

* modal footer

---------

Co-authored-by: Angel Garbarino <argarbarino@gmail.com>

* Display issuer on Configuration details (#28209)

* display issuer on configuration details

* workflow complete, now on to testing

* handle issuer things

* fix all the broken tests things

* add test coveragE:

* cleanup

* rename model/adapter

* Update configure-aws.ts

* Update aws-configuration-test.js

* 90 percent there for pr comments

* last one for tonight

* a few more because why not

* hasDirtyAttributes fixes

* revert back to previous noRead->queryIssuerError

---------

Co-authored-by: Chelsea Shaw <82459713+hashishaw@users.noreply.github.com>
2024-08-29 12:17:51 -06:00
vinay-gopalan
ec9b675f70
Add OSS stub functions for Self-Managed Static Roles (#28199) 2024-08-29 10:01:01 -07:00
Ryan Cragun
78e1cceccc
ubi: fix HasLicense Redhat requirement (#28216)
Signed-off-by: Ryan Cragun <me@ryan.ec>
2024-08-29 09:14:09 -06:00
Paul Banks
e962605055
Bump raft to 1.7.1 to include pre-vote fixes (#28218) 2024-08-29 14:20:51 +00:00
Violet Hynes
a5262e08bb
VAULT-30219 CE changes for versioned secret fix (#28207)
* VAULT-30219 CE changes for versioned secret fix

* Changelog
2024-08-28 11:29:06 -04:00
Chelsea Shaw
872f31fa1d
UI: remove renew self call after login (#28204)
* check for renewAfterEpoch before comparing it

* add test coverage for regression

* add comment. Fixes VAULT-4630

* throw error

* add changelog
2024-08-28 10:05:29 -05:00
Chris Capurso
de0c724d72
handle mount fields for non-entity clients; prevent null values (#28202) 2024-08-28 09:49:03 -04:00