luxolus/open-vault
2
0
Fork 0
Code Issues 1 Pull requests Releases Activity
17786 commits 1 branch 0 tags 214 MiB
Commit graph

22 commits

Author SHA1 Message Date
hc-github-team-secure-vault-core 553b065fbd
backport of commit 67a167139b6dae292ccccc24c177424d8e9fecd7 (#22300) 
Co-authored-by: Peter Wilson <peter.wilson@hashicorp.com>
 2023-08-11 14:06:14 +00:00
hc-github-team-secure-vault-core f155d1fe2c
backport of commit 4ce8e4b00f96de7b7f0d66878ef41d340fe33855 (#21988) 
Co-authored-by: Max Bowsher <maxbowsher@gmail.com>
 2023-07-20 21:11:14 +00:00
Anton Averchenkov 7a3f68bb97
Backport of [docs] Convert titles to sentense case into 1.14.x (#21921) 2023-07-18 17:07:55 -04:00
hc-github-team-secure-vault-core 6ea01382b4
backport of commit ba52063705ac8a7842ee2818e785faad361277d3 (#21849) 
Co-authored-by: Peter Wilson <peter.wilson@hashicorp.com>
 2023-07-14 10:22:54 +00:00
Peter Wilson 5eb03f785e
Docs: audit - add warning when disabling device regarding HMAC (#20715) 
* added note to warn of potential issues in disabling audit when using HMAC

* added to command docs pages too
 2023-05-23 14:55:55 +01:00
Ashlee M Boyer f3df55ad58
docs: Migrate link formats (#18696) 
* Adding check-legacy-links-format workflow

* Adding test-link-rewrites workflow

* Updating docs-content-check-legacy-links-format hash

* Migrating links to new format

Co-authored-by: Kendall Strautman <kendallstrautman@gmail.com>
 2023-01-25 16:12:15 -08:00
Max Bowsher d1f2b101b5
Add option 'elide_list_responses' to audit backends (#18128) 
This PR relates to a feature request logged through HashiCorp commercial
support.

Vault lacks pagination in its APIs. As a result, certain list operations
can return **very** large responses.  The user's chosen audit sinks may
experience difficulty consuming audit records that swell to tens of
megabytes of JSON.

In our case, one of the systems consuming audit log data could not cope,
and failed.

The responses of list operations are typically not very interesting, as
they are mostly lists of keys, or, even when they include a "key_info"
field, are not returning confidential information. They become even less
interesting once HMAC-ed by the audit system.

Some example Vault "list" operations that are prone to becoming very
large in an active Vault installation are:

    auth/token/accessors/
    identity/entity/id/
    identity/entity-alias/id/
    pki/certs/

In response, I've coded a new option that can be applied to audit
backends, `elide_list_responses`. When enabled, response data is elided
from audit logs, only when the operation type is "list".

For added safety, the elision only applies to the "keys" and "key_info"
fields within the response data - these are conventionally the only
fields present in a list response - see logical.ListResponse, and
logical.ListResponseWithInfo. However, other fields are technically
possible if a plugin author writes unusual code, and these will be
preserved in the audit log even with this option enabled.

The elision replaces the values of the "keys" and "key_info" fields with
an integer count of the number of entries. This allows even the elided
audit logs to still be useful for answering questions like "Was any data
returned?" or "How many records were listed?".
 2023-01-11 16:15:52 -05:00
Mike Palmiotto 4b8747ab51
command/audit: Recommend multiple audit devices (#18348) 
* command/audit: Add note about enabling multiple audit devices

* docs: Recommend multiple audit devices
 2022-12-13 17:51:03 -05:00
mickael-hc e885ccfd8c
fix formatting for note in audit section (#17335) 2022-09-28 10:17:36 -07:00
mickael-hc feddc21019
docs: clarify json types and workaround (#17318) 
* docs: clarify json types and workaround

* Apply suggestions from code review

Co-authored-by: Loann Le <84412881+taoism4504@users.noreply.github.com>

Co-authored-by: Loann Le <84412881+taoism4504@users.noreply.github.com>
 2022-09-27 15:35:41 -04:00
Bryce Kalow dfc3ad015a
website: content updates for developer (#17035) 
* Chore (dev portal): update learn nav data links  (#15515)

* Update docs-nav-data.json

* Update docs-nav-data.json

* website: fixes internal redirects (#15750)

* chore: remove duplicate overview item (#15805)

* Use `badge` for `<sup>` tags in nav data JSON files (#15928)

* Replacing <sup> tags with badge

* Adding type and color to badges

* fix broken links in vault docs (#15976)

* website: Update old learn links to redirect locations (#16047)

* update previews to render developer UI

* update redirects

* adjust content so it is backwards compat

Co-authored-by: HashiBot <62622282+hashibot-web@users.noreply.github.com>
Co-authored-by: Kendall Strautman <36613477+kendallstrautman@users.noreply.github.com>
Co-authored-by: Ashlee M Boyer <43934258+ashleemboyer@users.noreply.github.com>
 2022-09-22 08:11:04 -07:00
Brian Shumate 1e9d4c8e72
Audit device: Clarifications based on feedback (#16881) 
- Update blocked audit device to use feedback from #6484
- This PR supersedes #6484
 2022-08-26 09:19:49 -04:00
Loann Le 6201506456
added link to tutorial (#15762) 2022-06-02 10:15:21 -07:00
Loann Le 561d8d45f8
updated warning (#15459) 2022-05-18 08:26:25 -07:00
Peter Wilson fec9fa6841
Modified explanation on >=1 audit devices and successful requests (#15110) 2022-04-21 09:15:05 -04:00
Rowan Smith 5074cec5cb
Update socket entry (#14569) 
Page edited: https://www.vaultproject.io/docs/audit/socket. We should include a note detailing that Vault may become unresponsive due to a TCP based socket output becoming unavailable per https://www.vaultproject.io/docs/audit#blocked-audit-devices
 2022-04-12 19:29:43 -07:00
John-Michael Faircloth f1aa1ed3af
docs: fix plugin redirects and clarify plugin scaling (#14732) 
* docs: fix plugin redirects

* update scaling external plugin text

* fix broken link in audit logs
 2022-03-29 15:03:57 -05:00
Yoko Hyakuna f374938d31
Fix broken links referencing to API docs (#14565) 
* Fix all '/api/' to '/api-docs/'

* Minor fixes

* Undo some of the unintentional changes
 2022-03-17 18:14:48 -07:00
Loann Le e94ab7c1f5
Documentation update: Added tuner parameters to the Sensitive information section (#12655) 
* added tuner parameter to doc

* reworded the text

* updated text based on feedback

* fine-tuning sentence

* changed to relative links
 2021-09-28 11:44:46 -07:00
Mike Green c04518044a
Clarify on overview page that audit is default replicated (#12298) 
* Note that audit is replicated

* tweak

* clarify local is to the cluster, not only the node

* tweaking. i think this makes more sense
 2021-09-01 13:53:01 -07:00
Bryce Kalow b76a56d40c
feat(website): migrates nav data format and updates docs pages (#11242) 
* migrates nav data format and updates docs pages

* removes sidebar_title from content files
 2021-04-06 13:49:04 -04:00
Jeff Escalante ec620a7765
Implement MDX Remote (#10581) 
* implement mdx remote

* fix an unfenced code block

* fix partials path

Co-authored-by: Jim Kalafut <jkalafut@hashicorp.com>
 2020-12-17 16:53:33 -05:00