mirror of
https://github.com/hashicorp/vault.git
synced 2025-08-20 14:11:07 +02:00
* UI: HDS adoption replace AlertBanner part 1 (#21163) * rename test selector * replace db banner * add class * replace db role edit * db creds * generate creds * simpler class * license banner component * oidc callback plash * raft * aws * secret create or update * change to compact alert for form field * change back to inline * combine alert banners * wrap in conditional * remove references to message class * UI: HDS adoption replace AlertBanner part 2 (#21243) * token expire warning * delete css * edit form * item details distribute mfa step 2 transit verify * back to secondary * distribute * oidc lease error * sign * kv obj and repl dash * more repl * update test selector * show, creds * shamir * pki csr * pki banners * add hds library to ember engines * woops comma * fix k8 test * update message error component for last! * hold off MessageError changes until next pr * revert test selectors * update pki tests * UI: part 3 remove alert banner (#21334) * final component swap * and actual final of MessageError * update MessageError selectors * delete alert-banner and remove references * update next step alerts to highlight color * finishing touches, auth form test and client dashboard inline link * fix more selectors * fix shamir flow test * ui: part 4 final cleanup (#21365) * replace AlertPopup * add test tag * move tag * one more message error tag * delete alert popup * final css cleanup * move preformatted flash into <p> tag * ui: address comments for sidebranch (#21388) * add periods, move link to trailing * more periods and typo fix
117 lines
4.2 KiB
Handlebars
117 lines
4.2 KiB
Handlebars
<PageHeader as |p|>
|
|
<p.top>
|
|
<Page::Breadcrumbs @breadcrumbs={{@breadcrumbs}} />
|
|
</p.top>
|
|
<p.levelLeft>
|
|
<h1 class="title is-3 has-bottom-margin-2" data-test-credentials-header>
|
|
{{if this.credentials "Credentials" "Generate credentials"}}
|
|
</h1>
|
|
</p.levelLeft>
|
|
</PageHeader>
|
|
|
|
{{#if this.credentials}}
|
|
<div class="box is-sideless is-fullwidth is-marginless has-bottom-padding-l" data-test-credentials-details>
|
|
<Hds::Alert @type="inline" @color="warning" as |A|>
|
|
<A.Title data-test-k8-alert-title>Warning</A.Title>
|
|
<A.Description data-test-k8-alert-message>You won't be able to access these credentials later, so please copy them now.</A.Description>
|
|
</Hds::Alert>
|
|
<InfoTableRow @label="Service account token">
|
|
<MaskedInput
|
|
@value={{this.credentials.service_account_token}}
|
|
@name="Service Account Token"
|
|
@displayOnly={{true}}
|
|
@allowCopy={{true}}
|
|
/>
|
|
</InfoTableRow>
|
|
<InfoTableRow
|
|
@label="Namespace"
|
|
@value={{this.credentials.service_account_namespace}}
|
|
@addCopyButton={{true}}
|
|
@alwaysRender={{true}}
|
|
/>
|
|
<InfoTableRow
|
|
@label="Service account name"
|
|
@value={{this.credentials.service_account_name}}
|
|
@addCopyButton={{true}}
|
|
@alwaysRender={{true}}
|
|
/>
|
|
<InfoTableRow @label="Lease expiry" @value={{date-format this.leaseExpiry "MMMM do yyyy, h:mm:ss a"}} />
|
|
<InfoTableRow @label="lease_id" @value={{this.credentials.lease_id}} />
|
|
<InfoTableRow />
|
|
</div>
|
|
|
|
<div class="has-top-margin-l">
|
|
<button class="button is-primary" type="button" data-test-generate-credentials-done {{on "click" this.cancel}}>
|
|
Done
|
|
</button>
|
|
</div>
|
|
{{else}}
|
|
<div data-test-generate-credentials>
|
|
<form {{on "submit" (perform this.fetchCredentials)}}>
|
|
<div class="field box is-sideless is-fullwidth is-marginless">
|
|
<p>This will generate credentials using the role <span class="is-font-mono">{{@roleName}}</span>.</p>
|
|
|
|
{{#if this.error}}
|
|
<MessageError class="has-top-margin-l" @errorMessage={{this.error}} />
|
|
{{/if}}
|
|
|
|
<label for="token" class="is-label has-top-margin-l">Kubernetes namespace</label>
|
|
<div class="has-text-grey is-size-8 has-bottom-margin-xs">
|
|
The namespace in which to generate the credentials.
|
|
</div>
|
|
<Input
|
|
@type="text"
|
|
@value={{this.kubernetesNamespace}}
|
|
class="input"
|
|
{{on "input" this.setKubernetesNamespace}}
|
|
data-test-kubernetes-namespace
|
|
/>
|
|
|
|
<div class="has-top-margin-l has-bottom-margin-l">
|
|
<Toggle
|
|
@status="success"
|
|
@size="small"
|
|
@checked={{this.clusterRoleBinding}}
|
|
@onChange={{(toggle-action "clusterRoleBinding" this)}}
|
|
data-test-kubernetes-clusterRoleBinding
|
|
>
|
|
<h3 class="title is-7 is-marginless">ClusterRoleBinding</h3>
|
|
<div class="description has-text-grey">
|
|
<span>
|
|
Generate a ClusterRoleBinding to grant permissions across the whole cluster instead of within a namespace.
|
|
This requires the Vault role to have kubernetes_role_type set to ClusterRole.
|
|
</span>
|
|
</div>
|
|
</Toggle>
|
|
</div>
|
|
|
|
<TtlPicker
|
|
class="has-top-margin-l has-bottom-margin-m"
|
|
@initialEnabled={{false}}
|
|
@label="Time-to-Live (TTL)"
|
|
@onChange={{this.updateTtl}}
|
|
@helperTextDisabled="The TTL of the generated Kubernetes service account token. Defaults to the role's default TTL, or the default system TTL."
|
|
/>
|
|
</div>
|
|
<div class="has-top-margin-l">
|
|
<button
|
|
class="button is-primary {{if this.fetchCredentials.isRunning 'is-loading'}}"
|
|
type="submit"
|
|
disabled={{this.fetchCredentials.isRunning}}
|
|
data-test-generate-credentials-button
|
|
>
|
|
Generate credentials
|
|
</button>
|
|
<button
|
|
class="button has-left-margin-xs"
|
|
type="button"
|
|
disabled={{this.fetchCredentials.isRunning}}
|
|
{{on "click" this.cancel}}
|
|
data-test-generate-credentials-back
|
|
>
|
|
Back
|
|
</button>
|
|
</div>
|
|
</form>
|
|
</div>
|
|
{{/if}} |