20459 Commits

Author SHA1 Message Date
Kajeepan Kandeepan
c09ca8c124
[Docs] update reference consul-helm url to consul-k8s (#28825)
* chore: update reference consul-helm url to consul-k8s

* docs: add changelog

---------

Co-authored-by: Yoko Hyakuna <yoko@hashicorp.com>
2024-11-08 16:24:13 -08:00
Theron Voran
3f6cf98055
Docs update for vault-helm v0.29.0 and vault-k8s v1.5.0 releases (#28851) 2024-11-08 23:50:45 +00:00
Angel Garbarino
c7ca295816
Solve cntrl+f issue on KVv2 JSON details and edit views (#28808)
* initial changes need to add test coverage

* change icon

* replace original idea with hds::codeblock on kvv2 details view

* changelog

* fixing edit view by addressing viewportMargin

* fix failing test

* missedone

* Update 28808.txt

* Update json-editor.js

* test coverage

* update codeblock selector

* Update general-selectors.ts

* Update kv-data-fields.js

* Update ui/lib/core/addon/components/json-editor.js

Co-authored-by: claire bontempo <68122737+hellobontempo@users.noreply.github.com>

* Update ui/lib/kv/addon/components/kv-data-fields.js

Co-authored-by: claire bontempo <68122737+hellobontempo@users.noreply.github.com>

* update test name

* add default to modifier

---------

Co-authored-by: claire bontempo <68122737+hellobontempo@users.noreply.github.com>
2024-11-08 18:23:01 +00:00
miagilepner
09747c5d66
500 for grpc context canceled errors during login (#28866) 2024-11-08 18:01:18 +01:00
Angel Garbarino
2c3c585d70
Add identity_token_key to Azure and GCP secret engines (#28822)
* changes then onto tests

* fix wif test failures

* changelog

* clean up

* address pr comments

* only test one wif engine for relevant tests

* add back engine loop for tests that depend on type
2024-11-08 16:32:05 +00:00
ram-parameswaran
6f653692ea
Update seal-ha.mdx (#28863)
Fix typo and text formatting
2024-11-08 09:24:00 -05:00
akshya96
73702dbc8b
add fragment locks to GetActiveLocalFragment and GetActiveFragment (#28862)
* add fragment locks to GetActiveLocalFragment and GetActiveFragment

* update locks for all functions
2024-11-07 17:30:08 -08:00
Yoko Hyakuna
2cd0e14b7e
Update the AWS Marketplace link (#28860) 2024-11-07 14:21:42 -08:00
akshya96
1e82fe9980
adding local clients to local fragments ce changes (#28856)
* adding ce changes

* using oss patch
2024-11-07 13:32:16 -08:00
Yoko Hyakuna
69b1a615fb
[Docs] Add recommended patterns (#28843)
* Content conversion from tutorial to doc - seal

* Add AppRole best practices

* Clean up the reference list

* Updated the title

* match the titles

* Add namespaces best practices

* Update the table style
2024-11-07 13:17:43 -08:00
Steven Clark
68413ad058
Pull versioned golang images in Zlint testsuite to avoid pulling with latest (#28855)
* Pull versioned golang images in Zlint testsuite to avoid pulling with latest

 - Leverage the versioned golang images which should be more static avoiding
   issues we somtimes encounter pulling latest images from our docker mirror.
 - We use the golang runtime version to avoid having to update this test
   continuously.

* Fallback to latest if the version tag isn't a release tag
2024-11-07 14:04:45 -05:00
miagilepner
6c184c8756
VAULT-31393: Return 500 for some gRPC errors during login on perf standbys (#28807)
* return 500 for RPC failures during perf standby logins

* godoc

* changelog
2024-11-07 15:47:20 +01:00
miagilepner
2744bdbb7e
VAULT-24466: Quotas and replication docs (#28837) 2024-11-07 10:26:03 +01:00
hc-github-team-secure-vault-core
9cb10e41da
Update vault-plugin-auth-azure to v0.19.2 (#28848)
* Update vault-plugin-auth-azure to v0.19.2

* Add changelog

---------

Co-authored-by: hc-github-team-secure-vault-ecosystem <hc-github-team-secure-vault-ecosystem@users.noreply.github.com>
2024-11-06 17:19:28 -05:00
Violet Hynes
a7ffab97d0
VAULT-31075 CE changes (#28845) 2024-11-06 12:50:46 -05:00
Steven Clark
2e4a30f914
Fail sign/verify apis when Ed25519ph/ctx arguments are provided on CE (#28838) 2024-11-06 12:23:14 -05:00
claire bontempo
30d4e21e88
UI: LDAP Hierarchical roles (#28824)
* remove named path adapter extension, add subdirectory query logic to adapter

* add subdirectory route and logic to page::roles component

* fix overview page search select

* breadcrumbs

* update tests and mirage

* revert ss changes

* oops

* cleanup adapter, add _ for private methods

* add acceptance test

* remove type

* add changelog

* add ldap breadcrumb test

* VAULT-31905 link jira

* update breadcrumbs in Edit route

* rename type interfaces
2024-11-06 00:52:29 +00:00
Steven Clark
752bb08664
Transit: fix race in the key update api (#28839)
- The key update API would release the lock a little too early
   after it persisted the update so the reference could be updated
   when it was preparing the response to the caller across updates
   and/or key rotations
 - The storage updates were okay, just the response back to the caller
   of the update might see a mixture of different updates
2024-11-05 14:41:09 -05:00
Victor Rodriguez
c855f6e982
Fix bug setting PKI issuer enable_aia_url_templating to be set to false (#28832)
Fix bug setting PKI issuer enable_aia_url_templating to be set to false.
2024-11-04 20:51:01 +00:00
Sarah Chavis
38ad49d63b
Update ServiceNow info (#28823)
* Update ServiceNow info

* apply feedback

* tweaks

* clarify
2024-11-04 11:14:43 -08:00
Martin
c38c5763ed
Fix: Add missing iam:TagUser permission (#28757)
Co-authored-by: Yoko Hyakuna <yoko@hashicorp.com>
2024-11-04 09:20:37 -08:00
Victor Rodriguez
d99ade20be
Add PKI issuer config fields to enable check disablement parameters (#28826)
Add PKI issuer config fields to enable check disablement parameters.

Add the following new configuration fields for issuers:
  * allow_disable_critical_extension_checks
  * allow_disable_path_length_checks
  * allow_disable_name_checks
  * allow_disable_name_constraint_checks
2024-11-04 11:46:55 -05:00
miagilepner
10bd15f956
VAULT-30877: Repopulate AWS static creds queue in initialize (#28775)
* populate rotation queue in initialize

* docs, changelog

* add t.Helper()
2024-11-04 09:32:14 -06:00
Steven Clark
e489631e87
Transit: Allow ENT only arguments for sign/verify. Add docs for new Ed25519 signature types (#28821) 2024-11-01 12:57:52 -04:00
divyaac
bad87541ed
OSS Changes Patch (#28810) 2024-10-31 17:13:23 +00:00
Kuba Wieczorek
619843589b
CI: Pin VCM version used in Run Autopilot upgrade tests workflow (#28820) 2024-10-31 16:51:04 +00:00
Altabay-HashiCorp
76f22fac24
fix url typo in removing seal ha (#28818) 2024-10-31 09:49:26 -04:00
miagilepner
d717b48f90
fix flaky TestRaft_Removed (#28817) 2024-10-31 14:48:22 +01:00
Luciano Di Lalla
7d89f7104e
Docs/ldilalla hc patch 1 (#28815)
* Update CHANGELOG.md for 1.18.1, 1.17.8 and 1.16.12

* add HCSEC advisory

---------

Co-authored-by: Mark Collao <106274486+mcollao-hc@users.noreply.github.com>
2024-10-30 20:05:06 -04:00
Melody
9b3cc9b069
docs/vso: fix backwards v1 and v2 links (#28733)
Co-authored-by: Theron Voran <tvoran@users.noreply.github.com>
2024-10-30 16:42:36 -07:00
Sarah Chavis
6e234a8de6
Add note about new KV functionality in GUI (#28812) 2024-10-30 15:40:51 -07:00
Angel Garbarino
120497d813
Remove ember-cli-page-object: mount-backend-form (#28799)
* first round, there shall be more

* fix secret test

* more clean up

* maybe last round of clean up?

* this is going to take a while

* all the things or more of them at least

* this is the song that never ends...

* ... it goes on and on my friend.

* clean up clean up everybody lets clean up

* rename mount helper to mountBackend

* clean up 🧹

* address pr comments

---------

Co-authored-by: claire bontempo <68122737+hellobontempo@users.noreply.github.com>
2024-10-30 20:15:59 +00:00
miagilepner
fedc0b127f
Fix VAULT_CACERT environment variable (#28727) 2024-10-30 19:00:07 +01:00
miagilepner
41c0a3040b
VAULT-31748: add removable node HA backend interface and raft implementation (#28726) 2024-10-30 18:19:49 +01:00
claire bontempo
17d29f983c
UI: Upgrade Ember data 5.3.2 (and upgrade minor versions of ember-source and ember-cli) (#28798)
* upgrade ember-data 5.3.2, uninstall legacy compat, upgrade ember-cli, ember-source

* use query instead of findAll for auth methods, update tests

* set mutableId for kmip

* show generated private key data before transitioning to details

* update kv metadata test

* remove deprecated methods from path help service

* add changelog, update readme version matrix

* remove toggle template helper
2024-10-30 09:10:22 -07:00
Ken Keller
cc62bf2ac2
Update index.mdx (#28802)
fixed some lower case instances of Helm
2024-10-30 10:06:47 -05:00
claire bontempo
c1b35778d7
display error message if no key name (#28801) 2024-10-29 16:34:57 -06:00
claire bontempo
9d354199ac
remove copy about wiping storage (#28800) 2024-10-29 16:34:24 -06:00
Ryan Cragun
31b139c8ce
pipeline: include the version in the dynamic config key (#28793)
Cache scopes allow other branches to inherit default branch scopes,
which means that release branches can restore a key from main. Instead,
we now include the vault version as part of the cache key to ensure
we don't include versions that are incompatible with our version.

Signed-off-by: Ryan Cragun <me@ryan.ec>
2024-10-29 16:02:00 +00:00
Yoko Hyakuna
68ed4ac841
Remove duplicated text (#28794) 2024-10-29 08:43:37 -07:00
miagilepner
195dfca433
VAULT-31264: Limit raft joins (#28790)
* Switch from an unbounded Map to an LRU, 429 when exceeding it's size, and repeat challenges to the same server rather than encrypting new ones

* Prune old challenges

* Remove from pending only if the answer is correct

* Add a unit test that validates 429s, delays, and eviction of old entries

* Switch to using a flat token bucket from x/time/rate

* remove from LRU on each challenge write

* Remove sleep, simplify unit test

* improve const names

* additional tests

* max answer size

* add locking to prevent multiple new challenges

* remove log line

---------

Co-authored-by: Scott G. Miller <smiller@hashicorp.com>
2024-10-29 10:14:44 +01:00
Victor Rodriguez
2eaae5e87b
Update to Go 1.22.8. (#28786) 2024-10-25 17:36:55 -04:00
vinay-gopalan
4688583754
upgrade GCP Auth to v0.19.1 (#28782) 2024-10-25 20:18:38 +00:00
vinay-gopalan
c62d24dfc7
upgrade GCP Secrets to v0.20.1 (#28781) 2024-10-25 20:12:29 +00:00
hc-github-team-secure-vault-core
a384eac192
Update vault-plugin-secrets-openldap to v0.14.3 (#28780)
* Update vault-plugin-secrets-openldap to v0.14.3

* Add changelog

---------

Co-authored-by: hc-github-team-secure-vault-ecosystem <hc-github-team-secure-vault-ecosystem@users.noreply.github.com>
2024-10-25 19:54:45 +00:00
Sarah Chavis
cccad7d53f
minor text edits and update includes to use shared partials for log level and log format (#28771) 2024-10-25 10:06:33 -07:00
Sarah Chavis
f439a1eece
Refresh CLI docs: vault agent family (#28770)
* save progress

* fix file name

* save progress

* save progress

* remove uneeded subheader

* Fix build error

* fix another build error
2024-10-25 09:47:17 -07:00
divyaac
0923064dff
Added Stubs to stop breakage of Ent (#28772) 2024-10-25 09:14:19 -07:00
Lucy Davinhart || Strawb System
dec3bcc1aa
docs: sys/internal/counters/activity, explain deprecation for current_billing_period (#28773)
per discussion
https://hashicorp.slack.com/archives/CPEPB6WRL/p1729786785076429
the reason this parameter is deprecated is because it's no longer required. make that clear in the docs.
2024-10-25 14:31:06 +02:00
Steven Clark
b4c332626f
Fix a race condition in mount lookups (#28767) 2024-10-24 21:18:36 +00:00