20459 Commits

Author SHA1 Message Date
divyaac
499d84c4f2
Added method to join PQ and current month, with tests (#27503)
* Added method to join PQ and current month, with tests

* Edited test and added go doc

* Cleanup test
2024-06-18 09:48:26 +05:30
Jason O'Donnell
fe1f36a1dc
Add SIGUSR2 pprof to agent and proxy (#27510)
* Add SIGUSR2 pprof to agent

* changelog

* Update command/agent.go

Co-authored-by: Violet Hynes <violet.hynes@hashicorp.com>

* Update command/agent.go

Co-authored-by: Violet Hynes <violet.hynes@hashicorp.com>

* Add to proxy, update tests

* Fix path

* Changelog

* dry

* choose one error style

---------

Co-authored-by: Violet Hynes <violet.hynes@hashicorp.com>
2024-06-17 17:10:00 +00:00
Chelsea Shaw
299cd3d1f7
UI: Refactor replication tests (#27519)
* create page component for mode/index

* add test selector to replication summary

* use new component on replication/mode/index route

* Update flaky test

* copyright headers
2024-06-17 12:08:04 -05:00
Peter Wilson
b2ac030593
temp directory not used in a few places, switched to using testify require to clean up (#27512) 2024-06-17 10:53:31 +01:00
Peter Wilson
bf82dfeac8
lowercase first letter of error message (#27513) 2024-06-17 09:50:48 +00:00
Yoko Hyakuna
164352e5b4
Remove an extra space (#27508) 2024-06-14 14:14:35 -07:00
Sarah Chavis
7f0e64480f
[DOCS] Correct adaptive overload link (#27506) 2024-06-14 11:44:58 -07:00
Adam Rowan
52d35cdf65
Update configuration.mdx (#27497)
Adding SNMPv3 fields to credential resolver documentation.
2024-06-13 16:33:56 -07:00
Mark Collao
99f685743e
add HCSEC-2024-11 to changelog (#27472)
* add HCSEC-2024-11 to changelog

* Update CHANGELOG.md
2024-06-13 22:53:55 +00:00
Ryan Cragun
456f180fb9
enos: use the correct install during upgrade (#27496)
Fix the upgrade scenario by utilizing the correct Vault install location
for the initial install and by using different initial upgrade versions.
Before we had upgrade versions that were only available for Enterprise
which would fail on CE.

Signed-off-by: Ryan Cragun <me@ryan.ec>
2024-06-13 22:21:02 +00:00
hc-github-team-secure-vault-core
c966ee651b
Update vault-plugin-auth-jwt to v0.21.0 (#27498)
* Update vault-plugin-auth-jwt to v0.21.0

* Add changelog

---------

Co-authored-by: hc-github-team-secure-vault-ecosystem <hc-github-team-secure-vault-ecosystem@users.noreply.github.com>
2024-06-13 20:42:47 +00:00
Yoko Hyakuna
1a0474d27b
Remove 'BETA' on Seal HA (#27492)
* Remove 'BETA' on Seal HA

* Fix the outline color
2024-06-13 10:36:48 -07:00
Ryan Cragun
84935e4416
[QT-697] enos: add descriptions and quality verification (#27311)
In order to take advantage of enos' ability to outline scenarios and to
inventory what verification they perform we needed to retrofit all of
that information to our existing scenarios and steps.

This change introduces an initial set of descriptions and verification
declarations that we can continue to refine over time.

As doing this required that I re-read every scenanario in its entirety I
also updated and fixed a few things along the way that I noticed,
including adding a few small features to enos that we utilize to make
handling initial versions programtic between versions instead of having a
delta between our globals in each branch.

* Update autopilot and in-place upgrade initial versions
* Programatically determine which initial versions to use based on Vault
  version
* Partially normalize steps between scenarios to make comparisons easier
* Update the MOTD to explain that VAULT_ADDR and VAULT_TOKEN have been
  set
* Add scenario and step descriptions to scenarios
* Add initial scenario quality verification declarations to scenarios
* Unpin Terraform in scenarios as >= 1.8.4 should work fine
2024-06-13 11:16:33 -06:00
Scott Miller
c131b47535
Link to the CLI commands in the BYOK pages (#27490) 2024-06-13 11:41:21 -05:00
Scott Miller
1a8e6791da
Update documentation to add the Transform import CLI command (#27487) 2024-06-13 11:35:39 -05:00
Ryan Cragun
80e6d81a4b
backport: bump backport-assistant to v0.4.3 (#27484)
Signed-off-by: Ryan Cragun <me@ryan.ec>
2024-06-13 10:29:52 -06:00
Violet Hynes
a4347e9098
Update backport assistant in CE (#27482) 2024-06-13 14:54:26 +00:00
Chelsea Shaw
ebb67c5648
UI: Glimmerize application route (#27473)
* glimmerize application route

* glimmerize application controller

* ts application controller

* stabilize replication test
2024-06-13 09:39:34 -05:00
Equus quagga
f385807fc6
Update secrets-sync.mdx (#27356)
Remove association mistakenly had two name parameters instead of name and secret_name.
2024-06-13 10:30:11 -04:00
Violet Hynes
b48bc61052
VAULT-25456 CE side of changes for snapshot restore namespace cache bug (#27474)
* VAULT-25456 CE side of changes for snapshot restore namespace cache bug

* Changelog

* Unexport function
2024-06-13 10:25:53 -04:00
Marc Boudreau
837a5fef88
Extract logic to select appropriate RWMutex implementation for stateLock (#27456)
* improve: extract logic to select either locking.DeadlockRWMutex or locking.SyncRWMutex out of CreateCore and into their own functions

* add copyright header for new files

* move new files to helper/locking package

* adjust names of helper functions moved to locking package
2024-06-13 10:21:55 -04:00
Marc Boudreau
30d287edeb
capture docker logs if container creation failed (#27449) 2024-06-13 08:05:01 -04:00
John-Michael Faircloth
377294fa76
docs: add link to jwt auth upgrade note for 1.16 (#27468) 2024-06-12 18:54:08 +00:00
John-Michael Faircloth
76ebf0b41b
docs: correct auth jwt role requirements (#27384)
* docs: correct auth jwt role requirements

* remove upgrade guide to be added in separate PR

* Revert "remove upgrade guide to be added in separate PR"

This reverts commit 6554d3ff63623a329b0d93f7143d95cd3f19b3e6.

* update required details for bound audience

* Apply suggestions from code review

Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>

* fix formatting to match the existing format of the file

* add 1.16 known issues

* add 1.17 upgrade guide note

---------

Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>
2024-06-12 13:46:40 -05:00
Chelsea Shaw
fab7d0fb10
UI: Reorganize OIDC client tests (#27465)
* move existing clients and keys tests into keys module

* move tests from clients-assignments-test to assignments module

* rename clients-keys-test to clients-test
2024-06-12 13:36:16 -05:00
Josh Black
f33f1b15fc
improve autopilot logging when it starts up (#27464)
* improve autopilot logging when it starts up

* add changelog
2024-06-12 11:07:14 -07:00
Ian Ferguson
663c9a382d
Allow identity mount to be tunable (#14723)
* Allow `identity` mount to be tunable

* Add changelog
2024-06-12 13:16:58 -04:00
Meggie
346d233ca1
changelog++ (#27462) 2024-06-12 13:10:24 -04:00
Violet Hynes
a40265de6e
Remove changelog checklist item from PR template (#27460)
* Remove changelog checklist item from PR template

* Update ent PR guidance
2024-06-12 12:59:03 -04:00
Thy Ton
83111c010c
use BUILD_MINIMAL env to build minimal Vault with few storage options and plugins (#27394) 2024-06-12 16:53:49 +00:00
Victor Rodriguez
c4fcb4a086
Move fetchCertBySerial back into the main PKI package. (#27461)
* Move fetchCertBySerial back into the main PKI package.

In order to avoid polluting the issuing package with StorageContext, move
fetchCertBySerial back to the main PKI package. Note that this requires that
FetchRevocationInfo also be moved back to the main package.

* Run make fmt.
2024-06-12 15:53:40 +00:00
Peter Wilson
12e7c77ecc
TCP Listener: fix bug in parsing TCP listener settings for proxy_protocol_behavior (#27459)
* update code and test to support the documented config setting 'deny_unauthorized' rather than 'deny_authorized' which was incorrect

* changelog
2024-06-12 15:30:19 +00:00
Violet Hynes
2db5d6aa54
Automate feature changelog checking (#27450)
* Automate feature changelog checking

* Add changelog for testing

* Simplify check

* Forgot the end of line thing

* Escape the characters

* More testing

* Last test?

* Delete test changelog
2024-06-12 08:54:29 -04:00
Steven Clark
405a3f426f
Add GetFullCaChain method to PKI issuer (#27451) 2024-06-11 16:39:28 -04:00
Sarah Chavis
495d617b01
draft release notes and explicit anchors for easier linking (#27431) 2024-06-11 13:29:55 -07:00
claire bontempo
96686838b5
change to url assertion (#27448) 2024-06-11 13:51:43 -05:00
Josh Black
1710f59688
add PR template (#27392)
* add PR template

* adjustments

* PR feedback and add a docs template as well

* Update .github/docs/pull_request_template.md

Co-authored-by: Violet Hynes <violet.hynes@hashicorp.com>

* further feedback

---------

Co-authored-by: Violet Hynes <violet.hynes@hashicorp.com>
2024-06-11 18:48:27 +00:00
Steven Clark
64316fa084
Fix PKCS7 parser failing to parse degenerated certificate messages (#27435)
* Fix PKCS7 parser failing to parse degenerated certificate messages

* Add cl
2024-06-11 12:57:54 -04:00
Steven Clark
d152de025d
Pin generated proto files to 1.34.2 (#27438) 2024-06-11 12:29:45 -04:00
claire bontempo
3fb78e39c0
UI: fix failing policy test (#27430)
* add spy to assert flash

* user general selector instead

* attempt to stabilize oidc-config test
2024-06-11 09:23:38 -07:00
dependabot[bot]
5517d0764c
Bump browser-actions/setup-chrome from 1.6.2 to 1.7.1 (#27246)
Bumps [browser-actions/setup-chrome](https://github.com/browser-actions/setup-chrome) from 1.6.2 to 1.7.1.
- [Release notes](https://github.com/browser-actions/setup-chrome/releases)
- [Changelog](https://github.com/browser-actions/setup-chrome/blob/master/CHANGELOG.md)
- [Commits](9683066f53...db1b524c26)

---
updated-dependencies:
- dependency-name: browser-actions/setup-chrome
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Peter Wilson <peter.wilson@hashicorp.com>
2024-06-11 17:13:00 +01:00
Ryan Cragun
a9114742b2
actions: update actions-slack-status to v2.0.1 (#27440)
Fix a node deprecation warning by updating our actions-slack-status to
v2.0.1, which pulls in a newer version of the github-script action that
causes the deprecation warning.

Signed-off-by: Ryan Cragun <me@ryan.ec>
2024-06-11 16:12:08 +00:00
claire bontempo
c7aaa69a27
update header assertion (#27439) 2024-06-11 15:43:58 +00:00
Scott Miller
e315ef31ec
Remove the Beta flag from Seal HA (#27437) 2024-06-11 16:36:58 +01:00
claire bontempo
55547fb81d
UI: Add validation for activity counter config retention_months max (#27429) 2024-06-11 08:08:47 -07:00
Angel Garbarino
927da859f7
UI Hide Secrets Sync from nav if not on license and/or no policy permissions (#27262)
* intial changes, haven't tested client counts or done test coverage

* client count rename getter to clairfy

* fix has-permission api-paths

* wip

* wip

* fix: explicitly refresh vault.cluster model to re-fetch activatedFeatures after actication

* tests: fix # of assertions for verifying that activation was called

* tests: tidy overview-test

* add additional api permission path and move fetch back to application

* add test coverage for the service

* cleanup

* remove test that checked for upsell without license or on community

* small comment change

* welp missed component getter

* flaky test fix

* flaky test

* small nit changes from pr reviews

* add defaults to sync mirage handler

* Gate sync overview route for users without access (#27320)

* routes: add redirect if user does not have access to sync

* tests: verify redirect on sync overview page happens

* tests: organize tests modules to ensure enterprise is explicitly set up

* add type enterprise required now because we do a check for this first

* fix oss test

---------

Co-authored-by: Noelle Daley <noelledaley@users.noreply.github.com>
2024-06-11 08:20:01 -06:00
Victor Rodriguez
67515c7e4a
Ongoing refactoring of PKI revocation code (#27427)
* Move resolveIssuerCRLPath to PKI issuing package.

* Move fetchCertBySerial to PKI issuing package.

* Move fetchRevocationInfo to PKI revocation package.

* Make associateRevokedCertWithIsssuer a method of RevocationInfo.

* Move serialFromCert and normalizeSerial to PKI parsing package.

* Move writeUnifiedRevocationEntry to PKI revocation package.

* Run make fmt.
2024-06-11 09:25:14 -04:00
Kuba Wieczorek
13250baa22
Skip TestConsulFencing_PartitionedLeaderCantWrite until we make it less flaky (#27434) 2024-06-11 11:02:42 +00:00
Peter Wilson
961442c959
VAULT-23334: CE changes to support exclusion in audit (#26615)
* CE changes to support exclusion in audit

* Add an external test for audit exclusion

---------

Co-authored-by: Kuba Wieczorek <kuba.wieczorek@hashicorp.com>
2024-06-11 08:40:18 +01:00
Peter Wilson
3f11c24c13
VAULT-23335: Audit - Exclusion Docs (Draft) (#26696)
* Added exclusion draft docs

* added message to link exported types RequestEntry and ResponseEntry to website docs

* Update website/content/docs/enterprise/audit/exclusion.mdx

Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>

* Update website/content/docs/enterprise/audit/exclusion.mdx

Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>

* Update website/content/docs/enterprise/audit/exclusion.mdx

Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>

* Update website/content/docs/enterprise/audit/exclusion.mdx

Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>

* Update website/content/docs/enterprise/audit/exclusion.mdx

Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>

* Update website/content/docs/enterprise/audit/exclusion.mdx

Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>

* Update website/content/docs/enterprise/audit/exclusion.mdx

Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>

* Update website/content/docs/enterprise/audit/exclusion.mdx

Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>

* Update website/content/docs/enterprise/audit/exclusion.mdx

Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>

* Update website/content/docs/enterprise/audit/exclusion.mdx

Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>

* Update website/content/docs/enterprise/audit/exclusion.mdx

Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>

* Update website/content/docs/enterprise/audit/exclusion.mdx

Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>

* Update website/content/docs/enterprise/audit/exclusion.mdx

Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>

* `an` => `a`

* quotes

* Update website/content/docs/enterprise/audit/exclusion.mdx

Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>

* Update website/content/docs/enterprise/audit/exclusion.mdx

Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>

* Update website/content/docs/enterprise/audit/exclusion.mdx

Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>

* Update website/content/partials/audit-options-common.mdx

Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>

* JSON {} 'objects'

* condition is optional

* Update website/content/docs/enterprise/audit/exclusion.mdx

---------

Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>
2024-06-11 08:39:54 +01:00