Jeff Hemmen
7a2eabde69
Simple typos ( #9119 )
2020-06-11 14:22:49 -04:00
Andy Assareh
e8a36eb752
replacing "a key usage mode" as it is confusing ( #9194 )
...
Since the context of this page is transit and encryption keys, the use of the word "key" to mean effectively common seems ill advised. Proposing an alternative wording.
2020-06-11 07:50:31 -04:00
Mike Wickett
5ca6057295
website: remove whitepaper link from subnav ( #9190 )
2020-06-10 16:01:23 -04:00
Theron Voran
e1a432a167
AWS: Add iam_groups parameter to role create/update ( #8811 )
...
Allows vault roles to be associated with IAM groups in the AWS
secrets engine, since IAM groups are a recommended way to manage
IAM user policies. IAM users generated against a vault role will
be added to the IAM Groups. For a credential type of
`assumed_role` or `federation_token`, the policies sent to the
corresponding AWS call (sts:AssumeRole or sts:GetFederation) will
be the policies from each group in `iam_groups` combined with the
`policy_document` and `policy_arns` parameters.
Co-authored-by: Jim Kalafut <jkalafut@hashicorp.com>
2020-06-09 16:56:12 -07:00
ncabatoff
315d1ba9c5
Explain what lease tidy does. ( #9178 )
2020-06-09 16:54:06 -04:00
joe miller
15661719fa
document all of the supported elliptic curves ( #8722 )
2020-06-08 11:26:56 -04:00
Rob Taylor
76e78605a9
Fixed minor typo in secrets documentation page ( #8856 )
2020-06-08 11:17:26 -04:00
Frederic Hemberger
4e13db3912
[docs/telemetry] Unnecessary comma in HCL example ( #8817 )
2020-06-08 11:07:28 -04:00
Rob Jackson
38ca50cdd9
update to include vault_format ( #8876 )
2020-06-08 10:40:03 -04:00
Tomas Bäckman
6e97db6d68
Add note about flag -target=recovery for auto-unseal mode ( #9163 )
2020-06-08 09:26:49 -04:00
Austin Gebauer
bf2ce8d1cb
docs: fix port number in curl command for aws rotate root iam creds ( #9157 )
2020-06-05 16:00:49 -07:00
Calvin Leung Huang
0565e28592
docs: document raft and mlock interaction ( #9093 )
...
* docs: document raft and mlock interaction
* docs: expand on mlock issue when raft is used
* Update website/pages/docs/configuration/index.mdx
Co-authored-by: Brian Kassouf <briankassouf@users.noreply.github.com>
Co-authored-by: Brian Kassouf <briankassouf@users.noreply.github.com>
2020-06-05 15:02:55 -07:00
Scott Miller
e2d5d92b77
Github markdown doesn't use "^" for superscript, have to be explicit ( #9156 )
2020-06-05 16:55:33 -05:00
Scott Miller
f8f4ae4ab2
Document and give an example of the input size limits when using the FF3-1 transform. ( #9151 )
...
* Document and give an example of the input size limits when using the FF3-1
transform.
2020-06-05 07:45:18 -05:00
Jason O'Donnell
e0e29a9586
docs/k8s: Add OpenShift K8s beta documentation ( #9135 )
...
* doc/k8s: add OpenShift examples
* Update requirements
* Update website/pages/docs/platform/k8s/helm/openshift.mdx
Co-authored-by: Theron Voran <tvoran@users.noreply.github.com>
* Fix ha example
* Fix ha doc
* Update image references
* Fix formatting
Co-authored-by: Theron Voran <tvoran@users.noreply.github.com>
2020-06-03 15:10:37 -04:00
Dave D'Amico
a60ba90a20
updated 1.3.2 and 1.4.0 upgrade guides to note AWS STS region issue fixed in 1.4.1 ( #9137 )
2020-06-03 10:27:45 -07:00
Theron Voran
7622bee530
Docs updates for vault-helm 0.6.0 release ( #9116 )
...
* Docs updates for vault-helm 0.6.0 release
* added openshift and postStart values
* noting that openshift support is a beta feature
2020-06-03 11:44:32 -04:00
Theron Voran
fa17e22050
Docs updates for vault-k8s 0.4.0 ( #9107 )
...
* Adding changes for vault-k8s 0.4.0
* add note about run-as-same-user rejecting root
2020-06-03 10:06:20 -04:00
Brian Kassouf
fbd9fd4510
Fix upgrade guide ( #9133 )
2020-06-02 16:27:19 -07:00
Michael Golowka
5ca4d819d1
Update OpenLDAP Secrets Docs with Password Policies ( #9088 )
...
* Update OpenLDAP docs to use password policies
2020-06-02 11:34:01 -06:00
Michael Golowka
bd587da491
Add docs for password policies ( #8974 )
...
* Add docs for password policies
2020-06-02 11:12:22 -06:00
Alexander Bezobchuk
9dd67cbeb6
Merge PR #9027 : Integrated Storage (Raft): Add Support for max_entry_size Config
2020-06-01 10:17:24 -04:00
dddugan
a098e313a9
correct sockaddr.is_contained example ( #9104 )
...
Syntax for sockaddr.is_contained should be outer, inner - i.e. range, IP. See https://docs.hashicorp.com/sentinel/imports/sockaddr/ for reference.
2020-05-29 10:51:31 -07:00
Jeff Escalante
0e3229a3d8
add missing styles for mdx components ( #9103 )
2020-05-29 13:29:24 -04:00
ncabatoff
9987b71a36
Update seal docs to reflect 1.3 changes. ( #9086 )
2020-05-29 13:28:03 -04:00
Christophe Drevet-Droguet
932c1834cc
ssh certificate signing: fix documentation of extensions ( #8859 )
2020-05-29 13:23:19 -04:00
Elthariel
3a07bd0bc4
doc: Add an example of templated policy using k8s metadata ( #9101 )
2020-05-28 17:54:56 -07:00
ncabatoff
d8c52a4b44
Add note regarding LDAP regression. ( #9038 )
2020-05-27 12:29:30 -04:00
Thomas L. Kula
3ce9615992
Allow auto_auth with templates without specifying a sink ( #8812 )
...
For situations where you want the Vault agent to handle one or more templates but do not require the acquired credentials elsewhere.
Modify the logic in SyncServer so that if there are no sinks, ignore any new credentials. Since SyncServer is responsible for shutting down the agent, make sure it still properly shuts down in this new situation.
Solves #7988
2020-05-26 13:52:14 -04:00
ncabatoff
175bff872c
Add some notes on what tidy does and how to see if your cluster can handle it ( #9036 )
2020-05-26 09:19:36 -04:00
Jim Kalafut
a9d7d34ede
Update release notes ( #9064 )
2020-05-21 18:51:19 -07:00
Mike Jarmy
95055d7409
update website for 1.4.2 ( #9063 )
2020-05-21 16:34:03 -04:00
Jeff Escalante
8eed94b072
🌷 Docs Website Maintenance ( #8985 )
...
* website maintenance round
* improve docs, revert bug workaround as it was fixed
* boost memory
* remove unnecessary code
2020-05-21 13:18:17 -04:00
Lauren Voswinkel
8fc08f8c91
Require TLS or plaintext flagging in MySQL configuration ( #9012 )
...
* Adds a safety switch to configuration files.
This requires a user to either use TLS, or acknowledge that they are sending
credentials over plaintext.
* Warn if plaintext credentials will be passed
* Add true/false support to the plaintext transmission ack
* Updated website docs and ensured ToLower is used for true comparison
2020-05-21 09:09:37 -07:00
Jason O'Donnell
4b2a72c616
doc: clarify token helper intro ( #9058 )
2020-05-21 10:11:32 -04:00
Jason O'Donnell
1845ef6d2e
doc: add environment variable template example ( #9019 )
...
* doc: add environment variable template example
* Update website/pages/docs/platform/k8s/injector/examples.mdx
Co-authored-by: Becca Petrin <beccapetrin@gmail.com>
Co-authored-by: Becca Petrin <beccapetrin@gmail.com>
2020-05-18 15:51:17 -04:00
Theron Voran
b7a9fb8566
docs: updating helm configuration ( #8973 )
...
Added helm configs that were changed/added in vault-helm
0.5.0. Also corrected the data type of a few config parameters.
2020-05-18 11:08:40 -07:00
Csongor Halmai
dd8c10bb76
fix missing line-continuation in sample code ( #9005 )
2020-05-15 08:29:32 -04:00
Tyler Reid
fbbd4fcf2d
docs: fix agent listener link ( #9003 )
2020-05-15 06:51:52 -05:00
Scott Miller
d1ba50384a
Soften the warning language on PKCS #1 v1.5 padding ( #8988 )
...
* Soften the warning language on PKCS #1 v1.5 padding
2020-05-14 12:29:21 -05:00
Jim Kalafut
5825b23013
Add 1.4.1 upgrade guide ( #8981 )
2020-05-13 16:55:32 -07:00
Jason O'Donnell
f65cd64696
doc: add notes about injector annotations ( #8992 )
2020-05-13 16:43:34 -04:00
Clement Chauplannaz
c33cd93b93
Typo in policies.mdx ( #8850 )
2020-05-13 15:17:41 -04:00
Steven Robertson
d9c5a6130a
fixes roleset GET to say 'read' instead of 'delete' ( #8799 )
2020-05-13 15:13:34 -04:00
ncabatoff
98f32a94a9
Static roles aren't supported yet for atlas. ( #8989 )
2020-05-13 12:13:29 -04:00
Scott Miller
8805a7b45c
Warn in the documentation against the use of CKM_RSA_PKCS. ( #8982 )
...
* Warn in the documentation against the use of CKM_RSA_PKCS
* tweak
* Roger roger.
2020-05-12 10:56:41 -05:00
Vishal Nayak
72c4e3c7af
Doc: seal migration update ( #8724 )
...
* Doc: seal migration update
* s/Auto Unseal/KMS Seal
* Update website/pages/docs/concepts/seal.mdx
Co-Authored-By: Meggie <meggie@hashicorp.com>
* Update website/pages/docs/concepts/seal.mdx
Co-Authored-By: Meggie <meggie@hashicorp.com>
* Update website/pages/docs/concepts/seal.mdx
Co-Authored-By: Meggie <meggie@hashicorp.com>
* Update website/pages/docs/concepts/seal.mdx
Co-Authored-By: Meggie <meggie@hashicorp.com>
* Update website/pages/docs/concepts/seal.mdx
Co-Authored-By: Meggie <meggie@hashicorp.com>
* Update website/pages/docs/concepts/seal.mdx
Co-Authored-By: Meggie <meggie@hashicorp.com>
* Update website/pages/docs/concepts/seal.mdx
Co-Authored-By: Meggie <meggie@hashicorp.com>
* s/Recovery/recovery
* remove 'at this point'
* Address review comments
* Address review feedback
* Update website/pages/docs/concepts/seal.mdx
Co-Authored-By: Meggie <meggie@hashicorp.com>
* Update website/pages/docs/concepts/seal.mdx
Co-Authored-By: Meggie <meggie@hashicorp.com>
* Update website/pages/docs/concepts/seal.mdx
Co-Authored-By: Meggie <meggie@hashicorp.com>
* Address review comments
Co-authored-by: Meggie <meggie@hashicorp.com>
2020-05-12 01:02:59 -04:00
Nicole Forrester
77ad037d9c
Add vault docs redirects & remove deprecated database docs ( #8922 )
...
* website: add redirects for old database docs
* delete deprecated database docs
2020-05-11 14:20:40 -06:00
Aleksandr Yakimenko
182bfc86f8
Fix minor typos in docs ( #8965 )
2020-05-11 11:12:48 -04:00
Lauren Voswinkel
a1f674c53c
Removing some unnecessary escape characters from Agent docs ( #8957 )
...
* Fix formatting of the Vault Agent docs
2020-05-09 12:52:13 -07:00
