22335 Commits

Author SHA1 Message Date
hc-github-team-secure-vault-core
7ecd47f104 Merge remote-tracking branch 'remotes/from/ce/main' 2025-12-12 21:02:34 +00:00
Vault Automation
0a52566ccc
Correct misleading godoc re DisplayAttrs.Value. (#11189) (#11227) 2025-12-12 21:00:07 +00:00
Violet Hynes
ff1d4da453
Manual CE backport VAULT-41128 ensure alias name is not logged in observations (#11296) (#11300)
* VAULT-41128 ensure alias name is not logged in observations (#11296)

* VAULT-41128 ensure alias name is not logged in observations

* feedback

* whoops
2025-12-12 20:25:20 +00:00
Vault Automation
be193ec3ab
VAULT-41147 add policy observations to Vault (#11205) (#11229)
Co-authored-by: Violet Hynes <violet.hynes@hashicorp.com>
2025-12-12 20:24:41 +00:00
Vault Automation
fbbb559ca6
VAULT-41153 correct emission of token create observations (#11302) (#11312)
* VAULT-41153 correct emission of token create observations

* make fmt

* mount info

Co-authored-by: Violet Hynes <violet.hynes@hashicorp.com>
2025-12-12 20:19:04 +00:00
hc-github-team-secure-vault-core
fa3296ecb8 Merge remote-tracking branch 'remotes/from/ce/main' 2025-12-12 20:04:17 +00:00
Vault Automation
1934f2698c
UI: Updating non-ember engines to utilize new config tune flow (#10853) (#11236)
* removing flags

* small changes

* fixes

* move things back

* utilizing aftermodel w mods, testing aws

* fix ssh tests

* fixing aws and azure

* fix gcp

* fix test and flip kv

* fix kv2 tests

* adding model to fix tests

* updates and removals

* fix tests

* no showing empty state, redirect to plugin settings after config save

* test fixes

* update subtitle to include namepsace, fix test

* removing index, replacing with general settings, updates

* updates and fix tests

* more test fixes

* wif tests

* updates to nav tests

* update tests and cleanup configuration logic

* add todos

* fix remaining tests, add nav test to gcp

* test tweak

* address todos, test update

* Update ui/app/routes/vault/cluster/secrets/backend/configuration/plugin-settings.ts



* I love prettier so much

---------

Co-authored-by: Dan Rivera <dan.rivera@hashicorp.com>
Co-authored-by: claire bontempo <cbontempo@hashicorp.com>
Co-authored-by: Shannon Roberts (Beagin) <beagins@users.noreply.github.com>
2025-12-12 11:23:32 -08:00
Vault Automation
be2cb06f8c
Backport refactor dependencies and removes disallowed vault imports from builtin Okta auth into ce/main (#11295)
* refactor dependencies and removes disallowed vault imports from builtin Okta auth (#10965)

* move SkipUnlessEnvVarsSet from vault/helper/testhelpers/ to vault/sdk/helper/testhelpers

* use unittest framework from vault-testing-stepwise module in place of sdk/logical

* refactor SkipUnlessEnvVarsSet() and NewAssertAuthPoliciesFunc() to sdk

* bump docker API version to 1.44 matching 2f33549

---------

Co-authored-by: Thy Ton <maithytonn@gmail.com>
2025-12-12 13:20:57 -06:00
Vault Automation
50c9fd55e5
Workaround backport for docker 29 ce main (#11177)
Co-authored-by: LT Carbonell <lt.carbonell@hashicorp.com>
2025-12-12 19:13:57 +00:00
hc-github-team-secure-vault-core
a5322e2a5e Merge remote-tracking branch 'remotes/from/ce/main' 2025-12-12 18:02:50 +00:00
Vault Automation
06068fb8eb
removes ember data models, adapaters and serializers for sync (#11026) (#11195)
Co-authored-by: Jordan Reimer <zofskeez@gmail.com>
2025-12-12 11:00:10 -07:00
Vault Automation
c5b3edc0e4
UI: Add general wizard component (#11136) (#11252)
* add general wizard component

* add copyright headers

* remove header, improve submit block conditional logic, add integration tests

Co-authored-by: lane-wetmore <lane.wetmore@hashicorp.com>
2025-12-12 11:14:00 -06:00
Vault Automation
7bf7bf39fe
Resolve glob and js-yaml security vulnerabilities (#11271) (#11314)
* remove unused packages

* patch vulnerable versions of glob and js-yaml SECVULN-33202

Co-authored-by: claire bontempo <68122737+hellobontempo@users.noreply.github.com>
2025-12-12 09:08:46 -08:00
hc-github-team-secure-vault-core
e4695eb742 Merge remote-tracking branch 'remotes/from/ce/main' 2025-12-11 19:04:39 +00:00
Vault Automation
fdacc28522
[UI] Ember Data Migration - LDAP Overview/Cleanup (#11255) (#11297)
* removes withConfig decorator and moves check to application route

* updates backendModel references in ldap engine to secretsEngine

* adds ldap config form class

* updates ldap config type in application route

* updates ldap configure and configuration routes to use api service

* adds capabilities service to ldap engine

* updates ldap mirage handler and scenario

* adds ldap capabilities constants and helper for fetching capabilities for roles

* updates ldap roles view to use api service

* updates ldap role details view to use api service

* updates ldap role create/edit views to use api service and form classes

* updates ldap role subdirectory view to use api service

* updates ldap role credentials view to use api service

* updates ldap libraries list views to use api service

* updates ldap library details view to use api service

* updates ldap library details accounts view to use api service

* updates ldap library details accounts check out view to use api service

* updates ldap library details configuration view to use api service

* updates ldap library create/edit workflows to use api service and form class

* fixes lint errors

* updates ldap overview to use api service

* updates ldap overview tests

* removes store and pagination services from ldap engine

* removes ldap related ember data files

* updates path_to_library var casing

Co-authored-by: Jordan Reimer <zofskeez@gmail.com>
2025-12-11 18:37:17 +00:00
hc-github-team-secure-vault-core
728692a578 Merge remote-tracking branch 'remotes/from/ce/main' 2025-12-10 22:02:47 +00:00
vinay-gopalan
3c99c68600
Backport #11277 to ce/main (#11282) 2025-12-10 15:46:49 -06:00
hc-github-team-secure-vault-core
da6ac6dadc Merge remote-tracking branch 'remotes/from/ce/main' 2025-12-10 18:03:22 +00:00
Vault Automation
2e0f2f1646
[UI] Ember Data Migration - LDAP Library (#11254) (#11260)
* removes withConfig decorator and moves check to application route

* updates backendModel references in ldap engine to secretsEngine

* adds ldap config form class

* updates ldap config type in application route

* updates ldap configure and configuration routes to use api service

* adds capabilities service to ldap engine

* updates ldap mirage handler and scenario

* adds ldap capabilities constants and helper for fetching capabilities for roles

* updates ldap roles view to use api service

* updates ldap role details view to use api service

* updates ldap role create/edit views to use api service and form classes

* updates ldap role subdirectory view to use api service

* updates ldap role credentials view to use api service

* updates ldap libraries list views to use api service

* updates ldap library details view to use api service

* updates ldap library details accounts view to use api service

* updates ldap library details accounts check out view to use api service

* updates ldap library details configuration view to use api service

* updates ldap library create/edit workflows to use api service and form class

* fixes lint errors

* removes errant log

Co-authored-by: Jordan Reimer <zofskeez@gmail.com>
2025-12-10 10:38:40 -07:00
hc-github-team-secure-vault-core
436e70355b Merge remote-tracking branch 'remotes/from/ce/main' 2025-12-10 17:06:01 +00:00
Vault Automation
00133872a2
Remove envelope encryption protos (#11041) (#11264)
* remove envelope encryption protos

* remove references from buf.yaml

* add back accidental delete

Co-authored-by: Rachel Culpepper <84159930+rculpepper@users.noreply.github.com>
2025-12-10 17:04:35 +00:00
hc-github-team-secure-vault-core
5f872b0eab Merge remote-tracking branch 'remotes/from/ce/main' 2025-12-09 18:04:17 +00:00
Vault Automation
80a5800c16
[UI] Ember Data Migration - LDAP Roles (#11196) (#11249)
* removes withConfig decorator and moves check to application route

* updates backendModel references in ldap engine to secretsEngine

* adds ldap config form class

* updates ldap config type in application route

* updates ldap configure and configuration routes to use api service

* adds capabilities service to ldap engine

* updates ldap mirage handler and scenario

* adds ldap capabilities constants and helper for fetching capabilities for roles

* updates ldap roles view to use api service

* updates ldap role details view to use api service

* updates ldap role create/edit views to use api service and form classes

* updates ldap role subdirectory view to use api service

* updates ldap role credentials view to use api service

Co-authored-by: Jordan Reimer <zofskeez@gmail.com>
2025-12-09 17:26:04 +00:00
hc-github-team-secure-vault-core
9955b15196 Merge remote-tracking branch 'remotes/from/ce/main' 2025-12-08 22:02:44 +00:00
Vault Automation
78a4ea458f
replace vault-logo-spinner inline styles (#11234) (#11235)
Co-authored-by: claire bontempo <68122737+hellobontempo@users.noreply.github.com>
2025-12-08 13:32:57 -08:00
hc-github-team-secure-vault-core
d7a9394ba7 Merge remote-tracking branch 'remotes/from/ce/main' 2025-12-08 07:04:25 +00:00
Vault Automation
9bc8a5074a
Vault-27794 : Update unsync as successful when destination no longer exists in secret sync (#10951) (#11218)
* VAULT-27794 - Secret sync bypassing errors while deleting a Vercel destination

* VAULT-27794 - Update unsync as successful when destination no longer exists

* VAULT-27794 - Added changelog and tests

* VAULT-27794 - Added changelog and tests

* VAULT-27794 - Comments updated

* VAULT-27794 - Updated code chanes as per review comments

* VAULT-27794 - Updated code chanes as per review comments

* Update changelog/_10951.txt



---------

Co-authored-by: santoshhashicorp <santosh.yelamarthi@hashicorp.com>
Co-authored-by: John-Michael Faircloth <fairclothjm@users.noreply.github.com>
2025-12-08 12:20:56 +05:30
hc-github-team-secure-vault-core
af46b1217d Merge remote-tracking branch 'remotes/from/ce/main' 2025-12-05 23:03:33 +00:00
Vault Automation
63bbbd163b
UI: Build policy generator (#10985) (#11209)
* wip policy stanza builder

* Implement add and delete new stanza functionality

* refactor to use Set()

* make copy updates, add callback functionality to pass policy to parent

* move policy formatter to util, add test coverage

* =separate acl-policy component into two smaller components, add automation snippets

* reorganize utils, add test coverage

* finish rename

* reduce scope of builder

* fix spacing

* add a ns test, remove unused spacing var

* rename arg

Co-authored-by: claire bontempo <68122737+hellobontempo@users.noreply.github.com>
2025-12-05 22:28:39 +00:00
hc-github-team-secure-vault-core
e5664bd36d Merge remote-tracking branch 'remotes/from/ce/main' 2025-12-05 18:02:33 +00:00
Vault Automation
c34e25fb76
[UI] Ember Data Migration - LDAP Config (#11048) (#11194)
* removes withConfig decorator and moves check to application route

* updates backendModel references in ldap engine to secretsEngine

* adds ldap config form class

* updates ldap config type in application route

* updates ldap configure and configuration routes to use api service

Co-authored-by: Jordan Reimer <zofskeez@gmail.com>
2025-12-05 17:43:38 +00:00
hc-github-team-secure-vault-core
d4a735454d Merge remote-tracking branch 'remotes/from/ce/main' 2025-12-05 08:02:45 +00:00
Vault Automation
cfc130b40b
VAULT-28518 : added force-delete flag in secret sync (#10990) (#11180)
* added force-delete flag in secret sync

* added tests for force-delete destination flag

* added changelog

* updated test

* updated description

* updated force-delete flag

* updated changelog

* updated tests for force_delete

* Update changelog/_10990.txt



---------

Co-authored-by: suraj-simha <suraj.s@hashicorp.com>
Co-authored-by: Suraj-S <suraj.s4@ibm.com>
Co-authored-by: John-Michael Faircloth <fairclothjm@users.noreply.github.com>
2025-12-05 12:42:22 +05:30
hc-github-team-secure-vault-core
407639faf2 Merge remote-tracking branch 'remotes/from/ce/main' 2025-12-04 20:02:54 +00:00
akshya96
6c6777ef5c
Backport Fix adding additional public keys for tests in ent into ce/main (#11146)
* resolving conflicts for backport

* remove ent file
2025-12-04 11:44:25 -08:00
hc-github-team-secure-vault-core
abda3e90d3 Merge remote-tracking branch 'remotes/from/ce/main' 2025-12-04 17:05:12 +00:00
Vault Automation
782f19d644
actions: add fallback ondemand runners types (#11142) (#11149)
One feature of ondemand self-hosted runners is that we don't contend
with other repositories for self-hosted runners. The penalty for using
ondemand is that there are no hot runner pools, so provisioning time
is usually around 30 second but in worst can hit the two minutes mark.
These numbers rely on immediately capacity in the default region
(us-west-2). Every once in a while we see runner provisioning times for
ondemand CI runners go into the tens of minutes, presumably due to
capacity issues. Instead of waiting around for a runner that will
fulfill our single instance type, we'll add a few fallback types we can
attempt if we hit a capacity snag on our preferred machine.

Signed-off-by: Ryan Cragun <me@ryan.ec>
Co-authored-by: Ryan Cragun <me@ryan.ec>
2025-12-04 16:37:07 +00:00
hc-github-team-secure-vault-core
24109fe348 Merge remote-tracking branch 'remotes/from/ce/main' 2025-12-04 16:02:58 +00:00
Vault Automation
950d85a1dd
[UI][VAULT-40925]: PKI page headers (#11081) (#11148)
* Sign cerficate page header

* Generate certificates page header

* Role edit page header

* Role details page header

* Role create page header

* configure create and generate intemediate page headers

* generate root page header

* Pki issuer and tidy page headers

* More PKI page headers

* Update more pki page headers!

* Update PkiPageHeader component

* Pki error page header

* Fix page header title tests

Co-authored-by: Kianna <30884335+kiannaquach@users.noreply.github.com>
2025-12-04 16:00:06 +00:00
hc-github-team-secure-vault-core
8a8c557d1c Merge remote-tracking branch 'remotes/from/ce/main' 2025-12-04 15:02:53 +00:00
Vault Automation
2fca81e3c2
Backport Re-use kmip integ tests into ce/main (#11147)
* no-op commit

* Re-use kmip integ tests (#11050)

---------

Co-authored-by: Nick Cabatoff <ncabatoff@hashicorp.com>
2025-12-04 09:15:29 -05:00
hc-github-team-secure-vault-core
2eb01cca06 Merge remote-tracking branch 'remotes/from/ce/main' 2025-12-04 01:30:34 +00:00
Vault Automation
93a339547f
fix additional keys type in ce stubs (#11114) (#11145)
Co-authored-by: akshya96 <87045294+akshya96@users.noreply.github.com>
2025-12-03 17:02:19 -08:00
hc-github-team-secure-vault-core
ebc615b4d8 Merge remote-tracking branch 'remotes/from/ce/main' 2025-12-03 22:05:08 +00:00
Vault Automation
13154a7337
adding handler to close frame on esc & maintain focus on original element (#11121) (#11134)
Co-authored-by: Dan Rivera <dan.rivera@hashicorp.com>
2025-12-03 21:54:18 +00:00
Vault Automation
ad0a5656b4
release: make the CE branch of 1.20 inactive (#11116) (#11123)
1.21 is the current active CE branch. Make the CE 1.20 branch inactive
so that we no longer backport changes to it.

Signed-off-by: Ryan Cragun <me@ryan.ec>
Co-authored-by: Ryan Cragun <me@ryan.ec>
2025-12-03 21:16:23 +00:00
hc-github-team-secure-vault-core
04dcb793f8 Merge remote-tracking branch 'remotes/from/ce/main' 2025-12-03 21:03:43 +00:00
Vault Automation
ea2c22beab
go: bump Go to 1.25.5 (#11112) (#11118)
* go: bump Go to 1.25.5
* update changelog

Signed-off-by: Ryan Cragun <me@ryan.ec>
Co-authored-by: Ryan Cragun <me@ryan.ec>
2025-12-03 20:38:22 +00:00
Vault Automation
e6072b50e5
[UI] Ember Data Migration - PKI Overview/Cleanup (#11024) (#11117)
* removes store query from pki config route

* updates pki overview route to use api service

* removes remaining references to store in pki tests

* removes unused store service injections in pki components

* removes store dependency from pki engine

* removes ember data related unit tests for pki

* removes pki ember data models, adapters and serializers

* removes unused pagination service injections in config-ui, kv, pki and sync engines

* removes unused store service injections from pki engine

* updates dashboard quick-actions-card component to fetch options using api service

* removes path-help test using pki model

Co-authored-by: Jordan Reimer <zofskeez@gmail.com>
2025-12-03 20:37:20 +00:00
hc-github-team-secure-vault-core
a3a3eae24b Merge remote-tracking branch 'remotes/from/ce/main' 2025-12-03 19:04:11 +00:00