luxolus/open-vault
2
0
Fork 0
Code Issues 1 Pull requests Releases Activity
14511 commits 1 branch 0 tags 214 MiB
Commit graph

479 commits

Author SHA1 Message Date
Mike Green 68c561389f
add example for secret tuning (#12503) 2021-09-10 09:10:33 -07:00
Justin Weissig 8a721ef225
docs: update packaging (#12527) 
* docs: update packaging

Update language to support current enterprise packaging.

* Update performance-standby.mdx
 2021-09-09 14:36:15 -07:00
Mike Green d4656971b1
Add link to integrated storage docs page for learn tutorial (#12501) 
* Help find the learn tutorial

* Add common API path header and move learn link

@ncabatoff suggestion
 2021-09-09 09:51:45 -07:00
Theron Voran ed1088d81c
docs: k8s auth issuer lookup (#12506) 
Moved the issuer discovery details to from the CSI docs to the K8s
auth docs.
 2021-09-09 08:39:21 -07:00
Jim Kalafut 162d9eb095
Update 1.8 upgrade guide (#12518) 2021-09-08 13:14:51 -07:00
Alex Cahn dd0f3d9f2d
Update installation.mdx (#12516) 
Updating based upon feedback from ServiceNow review
 2021-09-08 12:57:15 -07:00
klucks83 eca34706d7
Update Auto Unseal info to say KMS instead of EKS (#10256) 
While EKS may be the managed kubernetes environment under the hood, I believe the idea behind this section of the documentation is to use AWS KMS for seal/unseal operations, not EKS.  (i.e. The surrounding documentation is discussing other Auto Unseal options such as Google KMS.)  

The use of the term EKS instead of KMS made it hard for me to discover this section of documentation, and was a little confusing at first until I realized the possible error.
 2021-09-08 10:06:24 -07:00
Justin Weissig 718a5f04c9
docs: update packaging (#12459) 
* [WIP] docs: update packaging

Update language to support current enterprise packaging.

* Update index.mdx

* Update entropy-augmentation.mdx

* Update entropy-augmentation.mdx

* Update control-groups.mdx

* Update sealwrap.mdx

* Update index.mdx

* Update control-groups.mdx

* Update entropy-augmentation.mdx

* Update index.mdx

* Update index.mdx

* Update sealwrap.mdx

* Update index.mdx

* Update index.mdx

* Update index.mdx
 2021-09-08 08:59:25 -07:00
mickael-hc d2310302a1
docs: provide clarifications for github auth method and ssh secrets engine (#12495) 
* Clarify that any org GitHub user token can be used

* Clarify ssh secrets allowed_extensions behaviors
 2021-09-08 10:55:35 -05:00
Rowan Smith b4dbd46928
audit page tweaks based on customer feedback (#12504) 2021-09-08 09:21:36 -04:00
Nicholas Seemiller 8bc69a4ccc
Update examples.mdx (#12333) 
Deployment manifest has incorrect `envs` tag. It should be `env`
 2021-09-07 17:32:22 -04:00
Pratyoy Mukhopadhyay 448ba32bf4
Update kv input documentation with edge case (#12500) 2021-09-07 13:15:33 -07:00
Pratyoy Mukhopadhyay 994372697b
Remove deprecated reauth function from docs (#12482) 2021-09-03 06:09:21 -07:00
Yoko Hyakuna 7c9b06da99
Fix isues 12397 (#12484) 2021-09-02 17:03:55 -07:00
Zadkiel 6d7ad94097
fix: update injector resources requirements (#11198) 2021-09-02 08:01:02 -07:00
Mike Green c04518044a
Clarify on overview page that audit is default replicated (#12298) 
* Note that audit is replicated

* tweak

* clarify local is to the cluster, not only the node

* tweaking. i think this makes more sense
 2021-09-01 13:53:01 -07:00
Loann Le d385747027
adding ARN in description (#12477) 2021-09-01 13:12:20 -07:00
Nick Cabatoff 5f4f59f19c
Document some missing http status codes. (#12472) 2021-09-01 09:51:26 -04:00
Nick Cabatoff 8154cd2e4a
Add notes re dangers of identity write endpoints. (#12365) 2021-08-30 10:23:33 -04:00
Pratyoy Mukhopadhyay 8314a6a5f7
Update lease revocation api docs (#12453) 
* Update lease revocation api docs

* Update lease_id description for lease renew endpoint
 2021-08-27 14:44:16 -07:00
Meggie 67dcbf1dea
Upgrade note for Alpine 3.14 docker images (#12450) 
* Upgrade note for Alpine 3.14 docker images

It might break things for some people

* Add CVE #

Co-authored-by: mickael-hc <86245626+mickael-hc@users.noreply.github.com>

* Adding upgrade note to all relevant versions

Co-authored-by: mickael-hc <86245626+mickael-hc@users.noreply.github.com>
 2021-08-27 12:33:44 -04:00
Loann Le 97a3fd4287
Seal Migration Doc: Modified existing note (#12444) 
* changed note

* fixed spacing issue

* Update website/content/docs/concepts/seal.mdx

Co-authored-by: Meggie <meggie@hashicorp.com>

* modified intro

Co-authored-by: Meggie <meggie@hashicorp.com>
 2021-08-26 16:06:23 -07:00
Nick Cabatoff 4f30a01068
Remove the old license instructions from the Enterprise index page. (#12400) 2021-08-25 12:16:38 -04:00
Calvin Leung Huang 306071f8b8
docs: fix exit flag reference on agent (#12401) 2021-08-24 14:26:56 -07:00
Meggie 98678e4caf
Upgrade note for RedHat package issue (#12345) 
* Upgrade note for RedHat package issue

* Reverse ordering of upgrade guides

* Refining affected versions
 2021-08-24 13:07:26 -04:00
swayne275 8b033c3c49
add known issue for dr secondary lease count quota invalidation (#12288) 
* add known issue for dr secondary lease count quota invalidation

* Update website/content/partials/lease-count-quota-upgrade.mdx

Co-authored-by: Meggie <meggie@hashicorp.com>

* put known issues to main 1.6 and 1.7 pages

Co-authored-by: Meggie <meggie@hashicorp.com>
 2021-08-23 15:58:06 -06:00
hghaf099 94ece6fd38
Lease count quotas does not apply to root tokens (#12405) 2021-08-23 17:22:28 -04:00
Chris Capurso 3f4a381f1b
Add kv custom key metadata (#12218) 
* add custom-metdata flag to "kv metadata put" command

* add kv metadata put command test for custom-metadata flag

* add custom_metadata to kv-v2 api docs

* add custom_metadata to kv-v2 cli docs

* update go.mod

* Add custom metadata limits to docs

* add changelog entry

* update vault-plugin-secrets-kv to @master
 2021-08-23 15:49:09 -04:00
Theron Voran f90b7104cd
docs: updates for vault-helm-0.15.0 and vault-k8s-0.12.0 (#12373) 
Also simplifies the cert-manager example
 2021-08-23 09:39:36 -07:00
Alex Cahn e4e8555e3a
Fixed a slight grammar mistake (#12356) 2021-08-20 12:08:34 -07:00
Mike Green 16794711d5
Add agent approle method example (#12297) 2021-08-19 11:03:57 -04:00
Meggie 0328598798
Removing line about consul consistency (#12353) 2021-08-19 10:01:47 -04:00
Nick Cabatoff f7cb7a19b2
Add docs for metrics from #11472. (#12278) 2021-08-19 09:49:00 -04:00
Andrei Burd b868dac12c
Docs: k8s annotations for static_secret_render_interval (#12244) 
Co-authored-by: Theron Voran <tvoran@users.noreply.github.com>
 2021-08-18 13:41:16 -07:00
Scott Miller 7fd2bdfa52
Fix a tokenization docs link fix (#12296) 
* docs link typo

* Off by one relative dir
 2021-08-18 13:44:25 -04:00
John-Michael Faircloth 30f470915f
docs: draft update guide for identity token roles (#12337) 2021-08-17 11:27:32 -05:00
Loann Le 4e3b66a2d7
Vault Documentation: Added Glossary (#12324) 
* added glossary

* Update website/content/docs/glossary.mdx

Co-authored-by: trujillo-adam <47586768+trujillo-adam@users.noreply.github.com>

* Update website/content/docs/glossary.mdx

Co-authored-by: trujillo-adam <47586768+trujillo-adam@users.noreply.github.com>

* modified secrets and barrier content based on feedback

Co-authored-by: trujillo-adam <47586768+trujillo-adam@users.noreply.github.com>
 2021-08-16 13:08:44 -07:00
Jim Kalafut 75b3dec8be
Add draft upgrade guide (#12332) 2021-08-16 10:58:09 -07:00
Yoko Hyakuna 7cfbc0350d
[Docs] Add code example (#12302) 
* Experiment adding code example

* Add Go code snippet

* Minor updates to the brief description

* Add a note to reference 'Code Example'

* Fix the title

* Add a callout note up front
 2021-08-12 12:53:15 -07:00
Jim Kalafut af57e56f09
Add AWS EC2 Auth known issue (#12316) 2021-08-12 10:45:32 -07:00
vinay-gopalan cf6932f5d5
[Docs] Add documentation for username_template feature in AWS Secrets Engine (#12310) 
* add username_template docs

* remove backticks

* update default template to be readable

* undo markdown block

* add md block to render indents
 2021-08-11 14:51:00 -07:00
Andrei Burd 63de67d891
Agent template static secrets docs update (#12307) 
* Agent template static secrets docs update

static_secret_render_interval mention

* Update website/content/docs/agent/template.mdx

Co-authored-by: Jason O'Donnell <2160810+jasonodonnell@users.noreply.github.com>

Co-authored-by: Jason O'Donnell <2160810+jasonodonnell@users.noreply.github.com>
 2021-08-11 12:30:37 -04:00
hghaf099 f885d97774
VAULT-2285 adding capability to accept comma separated entries for au… (#12126) 
* VAULT-2285 adding capability to accept comma separated entries for auth enable/tune

* Adding changelog

* Adding logic to detect invalid input parameter for auth enable config

* Updating tune.mdx

* Updating secret enable/tune for comma separated parameters

* Adding further parameter checks for auth/secret tests
Fixing changelog
using builtin type for a switch statement
Fixing a possible panic scenario

* Changing a function name, using deep.Equal instead of what reflect package provides

* Fixing auth/secret enable/tune mdx files

* One more mdx file fix

* Only when users provide a single comma separated string in a curl command, split the entries by commas

* Fixing API docs for auth/mount enable/tune for comma separated entries

* updating docs, removing an unnecessary switch case
 2021-08-09 15:37:03 -04:00
Meggie b43f9c10cc
Master -> Main on CL links (#12286) 2021-08-09 12:57:19 -04:00
Theron Voran 3455adc885
docs: vault-k8s and cert-manager (#12281) 
Adding an example of configuring vault-k8s to use cert-manager for
managing the webhook certs.

Co-authored-by: Calvin Leung Huang <1883212+calvn@users.noreply.github.com>
Co-authored-by: Ben Ash <32777270+benashz@users.noreply.github.com>
 2021-08-06 17:56:15 -07:00
Austin Gebauer bf086e8dc6
auth/oidc: documents redirect URI for UI login with form_post response_mode (#12273) 2021-08-05 15:13:33 -07:00
Loann Le 7ef0c4bde9
replaced changelog link (#12259) 2021-08-04 12:07:22 -07:00
Mike Green 65c449063b
Add link to Learn's usage tutorial (#11199) 
* Add link to Learn's usage tutorial

* Update website/content/docs/commands/operator/usage.mdx

Co-authored-by: Tu Nguyen <im2nguyen@users.noreply.github.com>

Co-authored-by: Tu Nguyen <im2nguyen@users.noreply.github.com>
 2021-08-03 16:19:09 -07:00
Jim Kalafut 0c678f14a0
Add link to plugin upgrade instructions (#12043) 2021-08-03 15:58:17 -07:00
mickael-hc 795a5fea43
docs: add barrier key auto-rotation to internals/rotation (#12149) 
This functionality was introduced in Vault 1.7.0 and is documented in api-docs/system/rotate-config
 2021-08-03 15:52:24 -07:00
Meggie 034f09c373
Adding upgrade note about arm64 (#12240) 2021-08-03 11:54:55 -04:00
Jonathan Ballet dd33777d17
Improve "Integrated Storage" documentation (#12200) 
* Improve "Integrated Storage" documentation

* add missing markup
* add more links to the configuration pages

* Improve the Raft Storage configuration page

* More markup

* Improve the "High Availability" documentation

* More links to the configuration pages

* More links

* even more links
 2021-07-30 15:05:15 -07:00
Mike Green 46e327de4e
add visible note about being enterprise (#12216) 2021-07-30 13:00:33 -04:00
Theron Voran d2e2761aee
docs: updates for vault-k8s v0.11.0 (#12209) 2021-07-29 14:52:29 -07:00
Theron Voran 5e113abbf4
docs: updating for vault-helm v0.14.0 (#12206) 
And found a couple missing values
 2021-07-29 11:16:08 -07:00
Pratyoy Mukhopadhyay 113b6885c3
[VAULT-2852] deprecate req counters in oss (#12197) 2021-07-29 10:21:40 -07:00
Vishal Nayak ab232b9d9a
Update docs to reflect support for autopilot DR (#12097) 
* Update docs to reflect support for autopilot DR

* Reword sentence

* Fix link

* Fix link
 2021-07-29 12:40:27 -04:00
Rowan Smith 8924e7d656
Fixed typo for 'forward' value in relation to caching (#12199) 2021-07-29 07:41:08 -04:00
SaintMalik 4223ddf6fd
Docs: Fix broken link (#12192) 
* Docs: Fix broken link

What does this PR do

Fix dead or broken links in this docs page, making navigation easy for others.

* fixing broken link

* fixing broken links
 2021-07-28 13:18:54 -07:00
akosuadenell 5f57fa205f
Update template.mdx (#11913) 
Deleted duplicate text
 2021-07-28 11:54:15 -07:00
Mike Green 94689c9fe5
Update license.mdx (#10841) 
Co-authored-by: Yoko Hyakuna <yoko@hashicorp.com>
 2021-07-28 11:50:30 -07:00
Jim Kalafut 64b7f8eb1a
Add 1.8 release notes (#12190) 2021-07-28 08:54:09 -07:00
Jim Kalafut f86cede572
Add 1.8 upgrade guide (#12186) 2021-07-28 08:46:40 -07:00
John-Michael Faircloth fa9c5dc67c
docs: Update Database Capabilities to include username customization (#12172) 
* docs: Update Database Capabilities to include username customization

* add operator/diagnose to the index file
 2021-07-27 10:33:12 -05:00
Hridoy Roy fff7dc7a40
Diagnose docs + changelog (#12159) 
* save

* diagnose docs

* changelog

* changelog formatting
 2021-07-26 08:45:12 -07:00
Mike Green ac37d0e5a9
Clarify sudo req'd for remount (#12139) 2021-07-22 16:09:26 -04:00
Jacob e579cf4ad1
docs/update replication seal table (#12147) 
* Update replication.mdx 

Add separate secondary seal and recovery key columns to better distinguish what is updated in each scenario.

* Update replication.mdx, fix caps.
 2021-07-22 15:41:36 -04:00
Nicholas Seemiller 87ff4bfac8
Create Kubernetes Namespace (#11902) 
If you're setting up vault for the first time on a cluster, the namespace may not exist.

Add a step to create the namespace.
 2021-07-22 15:41:22 -04:00
Nick Cabatoff 9a26209a9d
Fix a couple of broken links to api docs. (#12143) 
* Fix a couple of broken links to api docs.

* Qualify deprecation.
 2021-07-21 13:09:32 -07:00
Meggie 892545e41d
Document timeout setting for raft snapshots (#12140) 
* Document timeout setting for raft snapshots

We don't usually put this kind of information in the documentation, but
we are aware that snapshots can be slow and I could see this message
saving someone a lot of time. Open to closing this PR though if we
definitely don't want this kind of documentation.

* Fixing link
 2021-07-21 15:14:08 -04:00
John-Michael Faircloth 877b8166f2
docs: Update Database Capabilities to include username customization (#12130) 
* Update Database Capabilities docs page to include username customization column

* fix elasticdb entry, yes for 1.8+
 2021-07-21 13:24:22 -05:00
Nick Cabatoff 9db6e16a2a
Document bootstrap API. (#12132) 2021-07-20 18:24:49 -04:00
Calvin Leung Huang 185905d110
docs: remove username_template until after Vault 1.8 (#12129) 2021-07-20 11:46:09 -07:00
vinay-gopalan 859b60cafc
[VAULT-1969] Add support for custom IAM usernames based on templates (#12066) 
* add ability to customize IAM usernames based on templates

* add changelog

* remove unnecessary logs

* patch: add test for readConfig

* patch: add default STS Template

* patch: remove unnecessary if cases

* patch: add regex checks in username test

* patch: update genUsername to return an error instead of warnings

* patch: separate tests for default and custom templates

* patch: return truncate warning from genUsername and trigger a 400 response on errors

* patch: truncate midString to 42 chars in default template

* docs: add new username_template field to aws docs
 2021-07-20 09:48:29 -07:00
swayne275 ed361ee8da
Fix minor typo in Internals/Plugins documentation (#12113) 
* fix minor plugin doc typo

* fix limits of of typo and related

* forgot to save on this typo fix
 2021-07-20 07:21:24 -06:00
Nick Cabatoff e98b45fc79
Fix license expiration metric name in docs. (#12125) 2021-07-19 19:19:32 -04:00
Pratyoy Mukhopadhyay 3990446e46
Update some metric types, fix some wording (#12122) 2021-07-19 14:54:24 -07:00
Meggie 08de78aedd
Elaborating on telemetry persistence (#12119) 
* Elaborating on telemetry persistence

Some users understand how an aggregator relates to Vault telemetry, and
some users are approaching this concept for the first time. Those newer
to the concepts benefit from some extra clarification that the metrics
sourced directly from Vault aren't stored anywhere.

Sources:
https://prometheus.io/docs/concepts/metric_types/
https://github.com/OpenObservability/OpenMetrics/blob/main/specification/OpenMetrics.md
https://docs.splunk.com/observability/metrics-and-metadata/metric-types.html

* Updated summary note
 2021-07-19 16:12:29 -04:00
Dave Shepherd f6770be254
Add AWS Cognito secrets engine to community section of the plugins website page (#11966) 2021-07-16 13:22:33 -07:00
Mike Green 20b84c4deb
Docs: Add link to more sentinel examples (#11931) 2021-07-16 16:20:41 -04:00
Josh Black 9052ed6466
Document bolt metrics (#12107) 2021-07-16 11:44:30 -07:00
Tom Proctor 47457b1298
Add ServiceNow credential resolver docs (#11996) 
* Add ServiceNow credential resolver docs

* Add information about using system CAs

* Add field mappings and troubleshooting tips
 2021-07-16 10:53:14 +01:00
Mike Green 53759228b0
Clarify token create policies behavior (#12106) 2021-07-15 18:13:58 -04:00
Yahya 476b293a85
docs: fix heading number in SSH (#12029) 2021-07-15 14:25:45 -07:00
Angel Garbarino 288bc28127
Clarify KV 2 API docs (#12086) 
* initial draft of changes

* address pr comments and add changelog

* remove changelog
 2021-07-15 13:09:12 -06:00
Danny Hermes 16c3c4902a
Typo fix: period rotation -> periodic rotation (in transit docs) (#12030) 2021-07-15 08:18:09 -04:00
John-Michael Faircloth 07e00882b8
[docs] secrets/identity - grammar and punctuation fixes (#12065) 
* some grammar and punctuation fixes

* remove unneeded char
 2021-07-14 14:35:10 -05:00
Mike Green 217f69f8d2
docs/stepdown-clarification (#12077) 2021-07-14 15:10:07 -04:00
Loann Le 59bf7b9b09
removed sentence from intro (#12076) 2021-07-14 10:08:04 -07:00
MilenaHC 7c6f775798
updating API docs for InfluxDB (#12063) 2021-07-13 16:08:52 -05:00
Jason O'Donnell 8bc9790bf4
docs: fix formatting in azure secrets overview (#12058) 2021-07-13 14:55:53 -04:00
Yong Wen Chua 7ea650bc06
Update Documentation for GCP Static Account (#12027) 
* Update API Docs for Static Account

* Update CHANGELOGs

* Update guide

* Clarify IAM

* More refinement

* Fix missing replace of roleset while copy/pasting

Co-authored-by: Austin Gebauer <34121980+austingebauer@users.noreply.github.com>

* Remove CHANGELOG

* Fix some double ticks

* Apply suggestions from code review

Co-authored-by: Austin Gebauer <34121980+austingebauer@users.noreply.github.com>

* Update examples

Co-authored-by: Austin Gebauer <34121980+austingebauer@users.noreply.github.com>
 2021-07-13 09:36:05 -07:00
Meggie 02d5ce7374
Add replication example to upgrade docs (#12040) 2021-07-12 13:13:45 -04:00
Thor db9edf519b
cockroachdb: Fix either incorrect or outdated info (#11512) 
The documentation stated that Vault would not create the table
if it doesn't exist. But Vault does attempt to create the table if
it doesn't exist.

Ref:
https://github.com/hashicorp/vault/blob/master/physical/cockroachdb/cockroachdb.go#L84
 2021-07-09 14:30:21 -07:00
Pratyoy Mukhopadhyay 9b5e89bd34
[VAULT-2776] Add prefix_filter option to Vault (#12025) 
* [VAULT-2776] Add prefix_filter support to vault

* [VAULT-2776] Add filter_default config, update docs

* [VAULT-2776] Add changelog file

* [VAULT-2776] Update telemetry tests and error handling

* [VAULT-2776] Add test fixtures, update test

* [VAULT-2776] Update gitignore hcl filter
 2021-07-09 14:49:53 -05:00
Loann Le 43265d6626
changed name from faqs to faq (#12033) 2021-07-09 09:13:49 -07:00
MilenaHC 3c3b6529fd
Redshift - Add username customization (#12016) 
* username customization for redshift

* adding changelog and updating api-docs
 2021-07-08 10:29:12 -05:00
Danny Hermes a4bb9baf48
Typo fix: period rotation -> periodic rotation (#12011) 2021-07-08 10:45:49 -04:00
Jason O'Donnell 0bc339a2f8
docs: add SSL connection example to oracle (#12006) 
* docs: add SSL connection example to oracle

* Fix link

* Add quotes to path
 2021-07-07 12:47:49 -04:00
MilenaHC 4430a11bc5
Update SnowflakeDB plugin to v0.2.0 (#11997) 
* update snowflake database plugin to v0.2.0

* add changelog

* update api-docs
 2021-07-06 13:23:03 -05:00
Jason O'Donnell 5a3bf9b506
docs: fix link rendering for Oracle (#11994) 
* docs: fix link rendering for Oracle

* Fix render
 2021-07-06 13:25:36 -04:00
John-Michael Faircloth 1da8bb0a25
MongoDB Atlas: Add username customization docs (#11943) 
* MongoDB Atlas: Add username customization docs

* add changelog

* remove changelog; it was added to the relevant go.mod update PR
 2021-07-06 08:24:23 -05:00
Mike Green 7878db7c2c
Add link to newish learn upgrade guide (#11748) 2021-07-01 08:12:57 -07:00
Pratyoy Mukhopadhyay c7e6a07939
Augment lease revocation metrics (#11954) 
* [VAULT-1982] Add metric for irrevocable leases

* [VAULT-1982] Add metric for tracking worker count per queue

* [VAULT-1982] Update external docs

* [VAULT-1982] Add nil check on metrics sink

* [VAULT-1982] Update metric name, fix access patterns

* [VAULT-1982] Add locking when marking leases as irrevocable

* [VAULT-1982] Remove workers per mount metric

* [vault-1982] Misc review fixes

* [VAULT-1982] minor refactor

* [VAULT-1982] Add/update some comments
 2021-06-30 14:37:36 -07:00
Nick Cabatoff 7ad3f74e07
Add overlooked 1.7 agent cache eventual consistency options. (#11964) 2021-06-29 15:36:10 -04:00
Austin Gebauer b34e24fa64
docs: AWS KMS updates for key management secrets engine (#11958) 2021-06-29 10:31:25 -07:00
MilenaHC 02d45f3a66
Update ElasticSearch DB plugin to v0.8.0 (#11957) 
* update elasticsearch database plugin to v0.8.0

* add changelog

* update api-docs
 2021-06-29 08:07:00 -05:00
Jason O'Donnell b2c9b3c344
plugins/ad: Add rotate-role endpoint (#11942) 
* plugins/ad: add rotate-role

* Add doc

* changelog

* Add note about rotate-role in overview
 2021-06-25 14:00:03 -04:00
Theron Voran 5c5a57626e
docs: vault-helm add license update steps (#11911) 
Co-authored-by: Tom Proctor <tomhjp@users.noreply.github.com>
 2021-06-25 08:49:48 -07:00
Jason O'Donnell b2b25be0ce
agent/template: add static_secret_render_interval configurable (#11934) 
* agent/template: add default_lease_duration config

* go mod tidy

* Add changelog

* Fix panic

* Add documentation

* Change to static_secret_render_interval

* Update doc

* Update command/agent/template/template.go

Co-authored-by: Theron Voran <tvoran@users.noreply.github.com>

* Update changelog/11934.txt

Co-authored-by: Theron Voran <tvoran@users.noreply.github.com>

* Update website/content/docs/agent/template-config.mdx

Co-authored-by: Theron Voran <tvoran@users.noreply.github.com>

Co-authored-by: Theron Voran <tvoran@users.noreply.github.com>
 2021-06-24 15:40:31 -04:00
mr-miles 9e031b5766
Mongo doesnt allow periods in usernames (#11872) 
* mongo doesnt allow periods in usernames

* Update mongodb.mdx

Update template in docs

* Move replace to the end

* Adding a test for dot replacement

* Create 11872.txt
 2021-06-24 13:26:31 -04:00
Austin Gebauer 920b75540e
docs: corrects json and issuer for identity tokens (#11924) 2021-06-23 09:04:23 -07:00
MilenaHC 5483eba5fc
RabbitMQ - Add username customization (#11899) 
* add username customization for rabbitmq

* add changelog for rabbitmq

* Update builtin/logical/rabbitmq/path_config_connection.go

Co-authored-by: Tom Proctor <tomhjp@users.noreply.github.com>

* updating API docs

* moved to changelog folder

Co-authored-by: Tom Proctor <tomhjp@users.noreply.github.com>
 2021-06-22 14:50:46 -05:00
Nick Cabatoff 022ccc2657
Document vault.core.expiration_time_epoch metric. (#11919) 2021-06-22 14:31:08 -04:00
Calvin Leung Huang c1a2a939f9
agent: restart template runner on retry for unlimited retries (#11775) 
* agent: restart template runner on retry for unlimited retries

* template: log error message early

* template: delegate retries back to template if param is set to true

* agent: add and use the new template config stanza

* agent: fix panic, fix existing tests

* changelog: add changelog entry

* agent: add tests for exit_on_retry_failure

* agent: properly check on agent exit cases, add separate tests for missing key vs missing secrets

* agent: add note on difference between missing key vs missing secret

* docs: add docs for template_config

* Update website/content/docs/agent/template-config.mdx

Co-authored-by: Jason O'Donnell <2160810+jasonodonnell@users.noreply.github.com>

* Update website/content/docs/agent/template-config.mdx

Co-authored-by: Jason O'Donnell <2160810+jasonodonnell@users.noreply.github.com>

* Update website/content/docs/agent/template-config.mdx

Co-authored-by: Tom Proctor <tomhjp@users.noreply.github.com>

* Update website/content/docs/agent/template-config.mdx

Co-authored-by: Tom Proctor <tomhjp@users.noreply.github.com>

* Update website/content/docs/agent/template-config.mdx

Co-authored-by: Tom Proctor <tomhjp@users.noreply.github.com>

* docs: fix exit_on_retry_failure, fix Functionality section

* docs: update interaction title

* template: add internal note on behavior for persist case

* docs: update agent, template, and template-config docs

* docs: update agent docs on retry stanza

* Apply suggestions from code review

Co-authored-by: Jim Kalafut <jkalafut@hashicorp.com>
Co-authored-by: Theron Voran <tvoran@users.noreply.github.com>

* Update changelog/11775.txt

Co-authored-by: Brian Kassouf <briankassouf@users.noreply.github.com>

* agent/test: rename expectExit to expectExitFromError

* agent/test: add check on early exits on the happy path

* Update website/content/docs/agent/template-config.mdx

Co-authored-by: Tom Proctor <tomhjp@users.noreply.github.com>

Co-authored-by: Jason O'Donnell <2160810+jasonodonnell@users.noreply.github.com>
Co-authored-by: Tom Proctor <tomhjp@users.noreply.github.com>
Co-authored-by: Jim Kalafut <jkalafut@hashicorp.com>
Co-authored-by: Theron Voran <tvoran@users.noreply.github.com>
Co-authored-by: Brian Kassouf <briankassouf@users.noreply.github.com>
 2021-06-21 16:10:15 -07:00
Michael Golowka 7f6a1739a3
Cassandra: Refactor PEM parsing logic (#11861) 
* Refactor TLS parsing

The ParsePEMBundle and ParsePKIJSON functions in the certutil package assumes
both a client certificate and a custom CA are specified. Cassandra needs to
allow for either a client certificate, a custom CA, or both. This revamps the
parsing of pem_json and pem_bundle to accomodate for any of these configurations
 2021-06-21 11:38:08 -06:00
Mike Green fe56eaa1b7
Clarify upgrade steps and shutdown behavior (#11881) 
* Clarify upgrade steps and shutdown behavior

* add mlock to standby as well
 2021-06-18 11:42:55 -07:00
Nick Cabatoff 515f41558d
Docs for license autoloading. (#11886) 2021-06-18 12:19:18 -04:00
Yoko Hyakuna ed8511f8bf
Updated 'plus' > 'pro' (#11892) 2021-06-17 13:58:16 -07:00
Theron Voran e47be738b2
docs: update for vault-helm v0.13.0 (#11890) 2021-06-17 12:25:19 -07:00
Theron Voran b9d0b1a457
docs: vault-helm license support for enterprise (#11848) 2021-06-17 11:46:21 -07:00
Loann Le 81994cf795
Added new folder and files for Vault License FAQs (#11809) 
* added new files for faqs

* added another question

* fixed a few typos

* Update website/content/docs/enterprise/license/index.mdx

Co-authored-by: Yoko Hyakuna <yoko@hashicorp.com>

* added a link to FAQs page

* Update index.mdx

* Update website/content/docs/enterprise/license/faqs.mdx

Co-authored-by: Yoko Hyakuna <yoko@hashicorp.com>

* Update website/content/docs/enterprise/license/faqs.mdx

Co-authored-by: Yoko Hyakuna <yoko@hashicorp.com>

* Update website/content/docs/enterprise/license/faqs.mdx

Co-authored-by: Yoko Hyakuna <yoko@hashicorp.com>

* Update website/content/docs/enterprise/license/faqs.mdx

Co-authored-by: Yoko Hyakuna <yoko@hashicorp.com>

* Update website/content/docs/enterprise/license/faqs.mdx

Co-authored-by: Yoko Hyakuna <yoko@hashicorp.com>

* Update website/content/docs/enterprise/license/faqs.mdx

Co-authored-by: Yoko Hyakuna <yoko@hashicorp.com>

* Update website/content/docs/enterprise/license/faqs.mdx

Co-authored-by: Yoko Hyakuna <yoko@hashicorp.com>

* Update website/content/docs/enterprise/license/faqs.mdx

Co-authored-by: Yoko Hyakuna <yoko@hashicorp.com>

* Update website/content/docs/enterprise/license/faqs.mdx

Co-authored-by: Yoko Hyakuna <yoko@hashicorp.com>

* Update website/content/docs/enterprise/license/faqs.mdx

Co-authored-by: Yoko Hyakuna <yoko@hashicorp.com>

* Update website/content/docs/enterprise/license/faqs.mdx

Co-authored-by: Yoko Hyakuna <yoko@hashicorp.com>

* Update website/content/docs/enterprise/license/faqs.mdx

Co-authored-by: Yoko Hyakuna <yoko@hashicorp.com>

* Update website/content/docs/enterprise/license/faqs.mdx

Co-authored-by: Yoko Hyakuna <yoko@hashicorp.com>

* Update website/content/docs/enterprise/license/faqs.mdx

Co-authored-by: Yoko Hyakuna <yoko@hashicorp.com>

* Update website/content/docs/enterprise/license/faqs.mdx

Co-authored-by: Yoko Hyakuna <yoko@hashicorp.com>

* Update website/content/docs/enterprise/license/faqs.mdx

Co-authored-by: Yoko Hyakuna <yoko@hashicorp.com>

* Update website/content/docs/enterprise/license/faqs.mdx

Co-authored-by: Yoko Hyakuna <yoko@hashicorp.com>

* Update website/content/docs/enterprise/license/faqs.mdx

Co-authored-by: Yoko Hyakuna <yoko@hashicorp.com>

* Update website/content/docs/enterprise/license/faqs.mdx

Co-authored-by: Yoko Hyakuna <yoko@hashicorp.com>

* Update website/content/docs/enterprise/license/faqs.mdx

Co-authored-by: Yoko Hyakuna <yoko@hashicorp.com>

* incorporated feedback

* Update website/content/docs/enterprise/license/faqs.mdx

Co-authored-by: Jim Kalafut <jkalafut@hashicorp.com>

Co-authored-by: Yoko Hyakuna <yoko@hashicorp.com>
Co-authored-by: Jim Kalafut <jkalafut@hashicorp.com>
 2021-06-16 09:23:05 -07:00
Yoko Hyakuna 7c514c99cb
Remove a broken link (#11868) 2021-06-15 10:38:16 -07:00
Calvin Leung Huang 89f25d4c2a
docs: add troubleshooting sub-section on plugins (#11858) 
* docs: add troubleshooting sub-section on plugins

* docs: fix grammatical error
 2021-06-14 12:50:43 -07:00
Tom Proctor b7f5c60a29
Add more detailed documentation on setting issuer for CSI provider (#11839) 2021-06-14 16:41:22 +01:00
moayadi 6ead26183b
login instructions not correct (#11698) 
vault login -path=radius username=sethvargo should be changed to -method, not -path
 2021-06-14 11:09:47 -04:00
Jason O'Donnell c9c72d079b
docs: add permissions required for cassandra (#11844) 2021-06-11 14:47:34 -04:00
Marco Rieger 41d0b57498
Docs: Add Mittwald Vault Libraries (#9402) 2021-06-11 11:11:01 -07:00
pjaudiomv 34a28d592e
sts is PUT/POST request (#11681) 
* sts is PUT/POST request

add changelog

* rebase, rm uneeded changelog
 2021-06-11 12:58:39 -04:00
Philip Jay 59a2ae9c20
Include note about ManageOwnAccessKeys stanza (#11734) 
It's optional.  Make that clear.
 2021-06-11 12:03:21 -04:00
Jason O'Donnell 36cc4d8e87
db/cassandra: Adding changelog and documentation (#11822) 
* db/cassandra: add tls_server_name

* Remove changes from deprecated engine

* Add changelog and doc
 2021-06-10 19:06:40 -04:00
Michael Golowka 38ad0a4ac9
database/cassandra: Docs: Add known issue warning to pem_bundle field (#11823) 2021-06-10 17:04:12 -06:00
Shanker Naik 35593978ed
fix typo in vault operator init cmd (#11792) 2021-06-10 10:39:53 -04:00
Maha Sharabinth 57cf0a8a4e
Password policies: Fix link from API docs to password policy syntax (#11755) 
Fixed the issue with the URL link for the Password Policy Syntax.
 2021-06-08 11:50:15 -06:00
Maha Sharabinth b2c9af2c74
Add note about JSON encoding to password policies docs (#11754) 
Updated content to notify the users that the Special and Control characters will be escaped as per the JSON specification.
 2021-06-08 11:45:00 -06:00
Loann Le eacf7bd1c7
moved client content from cloud to vault (#11776) 
* moved client content from cloud to vault

* Empty commit trigger

Co-authored-by: Michele <mdeggies@gmail.com>
 2021-06-07 14:19:42 -07:00
Jason O'Donnell f1d88b8c58
Docs: clarify purposes in KMS for aws (#11782) 2021-06-07 13:45:14 -04:00
Hridoy Roy 1782b4e880
oss part of control groups upgrade (#11772) 
* oss part of control groups upgrade

* changelog and docs

* formatting

* formatting
 2021-06-07 09:15:35 -07:00
Josh Black c6c0424a8e
OSS parts of sys/config/reload/license (#11695) 2021-06-03 10:30:30 -07:00
Anand Capur 9c0c0eb7e5
Update index.mdx (#11753) 2021-06-02 16:20:32 -07:00
Oleksandr Melnyk 00150e9bf5
11688 Update docs about stackdriver telemetry (#11699) 
* 11688 Update docs about stackdriver telemetry

* 11688 Update docs about stackdriver telemetry
 2021-06-02 17:20:06 -04:00
Kendall Strautman a9c9bb3cde
chore: upgrades text-split-with-logo-grid (#11750) 
* chore: upgrades `text-split-with-logo-grid` and implementations

* fix: formatting docs page
 2021-06-02 14:01:05 -04:00
swayne275 9724f59180
Vault 1979: Query API for Irrevocable Leases (#11607) 
* build out lease count (not fully working), start lease list

* build out irrevocable lease list

* bookkeeping

* test irrevocable lease counts for API/CLI

* fix listIrrevocableLeases, test listIrrevocableLeases, cleanup

* test expiration API limit

* namespace tweaks, test force flag on lease list

* integration test leases/count API, plenty of fixes and improvements

* test lease list API, fixes and improvements

* test force flag for irrevocable lease list API

* i guess this wasn't saved on the last refactor...

* fixes and improvements found during my review

* better test error msg

* Update vault/logical_system_paths.go

Co-authored-by: Brian Kassouf <briankassouf@users.noreply.github.com>

* Update vault/logical_system_paths.go

Co-authored-by: Brian Kassouf <briankassouf@users.noreply.github.com>

* return warning with data if more than default leases to list without force flag

* make api doc more generalized

* list leases in general, not by mount point

* change force flag to include_large_results

* sort leases by LeaseID for consistent API response

* switch from bool flag for API limit to string value

* sort first by leaseID, then stable sort by expiration

* move some utils to be in oss and ent

* improve sort efficiency for API response

Co-authored-by: Brian Kassouf <briankassouf@users.noreply.github.com>
 2021-06-02 10:11:30 -06:00
Baljeet Singh daaec9bdee
Fixing issue with FPE read and delete api docs (#11735) 
Read and Delete FPE api-docs point to path `/transform/transformations/:name` instead it should be `/transform/transformation/:name`
 2021-06-01 17:56:26 -05:00
Mark Lewis 3e79e8252a
Update security.mdx (#11725) 2021-05-29 16:15:41 -07:00
Mark Lewis 76ee252953
Update architecture.mdx (#11724) 2021-05-29 16:14:21 -07:00
Scott Miller cff7a2c589
Clarify the accuracy of estimated encryption counts wrt cluster nodes (#11561) 2021-05-27 12:30:47 -05:00
Tom Proctor 96278a33d8
Clarify supported TCP listener config options for Agent (#11714) 2021-05-27 15:47:45 +01:00
Jason O'Donnell cd5ee2a6ee
docs/k8s: update for latest releases (#11701) 2021-05-25 15:13:00 -04:00
Anthony Burke 4e23452620
Changes role/roles (#11655) 2021-05-24 09:19:14 -07:00
Patrick Picard 4f587ad91f
Update index.mdx (#11644) 2021-05-24 08:43:53 -07:00
Theron Voran 6bdfe4d600
docs: small fixes in k8s docs (#11679) 
indentation and spelling
 2021-05-20 14:37:49 -07:00
Marc Falzon 31386218de
Add Exoscale plugins to the list of partner plugins (#11592) 
This change adds the Exoscale auth/secrets plugins to the list of
partner plugins on the website "Plugin Portal" page.
 2021-05-19 11:35:19 -07:00
Mark Lewis 322261c037
Update policies.mdx (#11618) 
Suggested PR to use more inclusive language.
 2021-05-18 13:02:40 -07:00
Vishal Nayak 549f1c7917
Minor fix to the docs (#11489) 2021-05-17 16:35:52 -04:00
Ricardo Cardenas d02a20bd2b
feat(aws): add ability to provide a role session name when generating STS credentials (#11345) 
* feat(aws): add ability to provide a sessionName to sts credentials

Co-authored-by: Brad Vernon <bvernon@nvidia.com>
Co-authored-by: Jim Kalafut <jim@kalafut.net>
Co-authored-by: Tom Proctor <tomhjp@users.noreply.github.com>
 2021-05-17 11:03:09 -07:00
Josh Black 641a81b74b
Provide a new API endpoint for retrieving signed licenses (#11543) 2021-05-12 12:19:25 -07:00
Austin Gebauer 872a4bd25f
Update GCP auth docs for signJwt transition to Service Account Credentials API (#11568) 2021-05-11 16:57:12 -07:00
Meggie ffda908b15
Add functional to logical description (#11263) 
Based on the gap analysis.
 2021-05-11 10:41:52 -04:00
Dave D'Amico 1d5d576a3e
SIGHUP syntax to update log level (#10972) 2021-05-07 08:30:11 -04:00
Daniela Lavric 48ce69057e
Docs - auth username characters (#11558) 
Document acceptable chars for usernames.
 2021-05-07 08:17:51 -04:00
Zachary Shilton 3fad03e9ff
website: support hidden pages in nav-data (#11528) 
* website: bump to docs-page prerelease, support hidden pages

* website: switch to hidden pages approach for docs and api-docs

* website: remove temporary fix for hidden pages, and related check

* website: fix content structure issue with docs/auth/jwt

* website: bump to latest pre-release

* website: bump to stable docs-page, w next-mdx-remote bump

* website: bump to latest markdown-page
 2021-05-06 13:32:25 -04:00
Nick Cabatoff 67374ba14d
Document the sync option for revoke/revoke-prefix. (#11538) 2021-05-06 10:18:46 -04:00
Jason O'Donnell 41ead5fb69
docs: remove duplicate config from csi (#11529) 2021-05-04 16:28:12 -04:00
Hridoy Roy 2945d95cb6
fix ff3 link (#11524) 2021-05-04 09:47:13 -07:00
Jason O'Donnell 194f1b3937
docs: add missing csi mount config (#11518) 2021-05-03 16:54:20 -04:00
Meggie 5d4341e4d6
docs: adding a storage concepts page (#9155) 
* Adding a storage concepts page

It very briefly covers some considerations for taking backups.

* Apply suggestions from code review

Co-authored-by: Calvin Leung Huang <cleung2010@gmail.com>
Co-authored-by: Jim Kalafut <jkalafut@hashicorp.com>

* Updated with some additional comments

* Attempt to further clarify sensitivity

* Update storage.mdx

* More on "Why backup?"

Added HashiConf talk link.

* Update website/content/docs/concepts/storage.mdx

Co-authored-by: Vishal Nayak <vishalnayak@users.noreply.github.com>

Co-authored-by: Calvin Leung Huang <cleung2010@gmail.com>
Co-authored-by: Jim Kalafut <jkalafut@hashicorp.com>
Co-authored-by: Vishal Nayak <vishalnayak@users.noreply.github.com>
 2021-04-28 10:51:36 -04:00
Artur Frysiak 3da7cdffc7
Fix endpoint path in example (#11437) 2021-04-27 14:53:19 -05:00
Jason O'Donnell ddfe5342c5
docs: add missing configurations for CSI documentation (#11236) 2021-04-26 17:32:00 +01:00
Yoko bc91eef281
[Docs] Add relevant Learn tutorial links (#11440) 
* Add cross-links to matching Learn tutorials

* Undo automatic format update by Atom

* Fix a typo

* Fix a grammartical error
 2021-04-22 10:09:31 -07:00
Michael Golowka 29d91d09ff
Add note about root_rotation_statements workaround for special chars (#11378) 2021-04-21 12:58:48 -07:00
Nick Cabatoff a62202eb87
Document unauth pprof and the new pprof endpoints. (#11413) 2021-04-21 15:21:59 -04:00
Austin Gebauer 81744c4094
Updates docs for G Suite config in JWT/OIDC auth method (#11418) 2021-04-21 10:59:37 -07:00
Josh Black 06809930a3
Add HTTP response headers for hostname and raft node ID (if applicable) (#11289) 2021-04-20 15:25:04 -07:00
claire bontempo 1f6633fd56
Grammar typo fix (#11357) 
* fixes are/is typo

* reverts change - need to checkout to new branch

* fixes is/are typo
 2021-04-20 10:11:35 -05:00
xka5h 034442b9ee
Update index.mdx to fix link to vault agent as a windows service link (#11356) 
* Update index.mdx

fixed link for windows agent

* removing the 's' in agents

Co-authored-by: Bryce Kalow <bkalow@hashicorp.com>

Co-authored-by: Bryce Kalow <bkalow@hashicorp.com>
 2021-04-19 11:36:43 -07:00
Noah Fontes 0f45cd37ea
Add community-maintained OAuth 2.0/OIDC secrets plugin to plugin portal docs (#11280) 2021-04-19 11:20:50 -07:00
Calvin Leung Huang a8cafab083
pki: fix tidy removal on revoked entries (#11367) 
* pki: fix tidy removal on revoked entries

* add CL entry
 2021-04-19 09:40:40 -07:00
Nick Cabatoff 50a471a5e1
Add config docs for leader_tls_servername. (#11369) 2021-04-16 09:40:42 -04:00
Nick Cabatoff 4312c2381e
Clarify non-explicit cloud auth for autosnapshots. (#11370) 2021-04-16 09:14:52 -04:00
Jason O'Donnell cc107171e2
docs: update vault-helm to 0.11.0 (#11355) 
* docs: update vault-helm to 0.11.0

* Update website/content/docs/platform/k8s/helm/configuration.mdx

Co-authored-by: Tom Proctor <tomhjp@users.noreply.github.com>

* Update website/content/docs/platform/k8s/helm/configuration.mdx

Co-authored-by: Tom Proctor <tomhjp@users.noreply.github.com>

* Update configuration.mdx

Co-authored-by: Tom Proctor <tomhjp@users.noreply.github.com>
 2021-04-14 11:20:26 -04:00
Tom Proctor 1139ce7cce
Add documentation for vault-csi-provider namespace config (#11344) 2021-04-14 14:53:15 +01:00
Jason O'Donnell 0363fcd3fb
docs: update vault-k8s to 0.10.0 (#11354) 2021-04-14 09:46:28 -04:00
Tom Proctor f932999bda
Add TFE/TFC auth plugin to plugin portal (#11348) 
* Add TFE/TFC auth plugin to plugin portal

As requested in #11202, this is an auth plugin designed to be run within TFE/TFC.

* Expand acronyms
 2021-04-13 10:22:38 -07:00
Jason O'Donnell 11d779154d
docs: add persistent cache (#11272) 
* docs: add persistent cache

* Clarify documentation

* Update website/content/docs/agent/caching/index.mdx

Co-authored-by: Theron Voran <tvoran@users.noreply.github.com>

* Update website/content/docs/agent/caching/persistent-caches/kubernetes.mdx

Co-authored-by: Theron Voran <tvoran@users.noreply.github.com>

* Update index.mdx

* Update website/content/docs/agent/caching/index.mdx

Co-authored-by: Calvin Leung Huang <cleung2010@gmail.com>

* Update website/content/docs/agent/caching/index.mdx

Co-authored-by: Calvin Leung Huang <cleung2010@gmail.com>

* Update index.mdx

* Update kubernetes.mdx

* Resolve conflicts

Co-authored-by: Theron Voran <tvoran@users.noreply.github.com>
Co-authored-by: Calvin Leung Huang <cleung2010@gmail.com>
 2021-04-08 10:19:17 -04:00
Andreas Gruhler 5c35d55b2f
replace reference to version 1.6.4 with 1.7 (#11223) 
Co-authored-by: Scott Miller <smiller@hashicorp.com>
 2021-04-07 16:39:59 -05:00
Roger Berlind 2762c45c9b
add Vault Enterprise license page (#11261) 
* add Vault Enterprise license page

* move license to index.mdx

* Remove `.mdx` from the hyperlink URL

Co-authored-by: Yoko <yoko@hashicorp.com>
 2021-04-07 14:31:06 -07:00
Bryce Kalow d5deb4ba79
website: fix incorrectly formatted frontmatter (#11290) 2021-04-06 15:37:13 -07:00
Nick Cabatoff 70cf7579de
How to create clusters with integrated storage, TLS, and dynamic nodes (#10865) 2021-04-06 17:25:22 -04:00
Bryce Kalow b76a56d40c
feat(website): migrates nav data format and updates docs pages (#11242) 
* migrates nav data format and updates docs pages

* removes sidebar_title from content files
 2021-04-06 13:49:04 -04:00
Meggie 8898f84a1e
No version reference here (#11237) 2021-03-30 11:44:47 -04:00
Jim Kalafut 11f43ef6a6
Update upgrade guide and changelog with AWS Auth deprecations (#11201) 2021-03-26 15:32:15 -07:00
Jason O'Donnell 6a92a8bd78
docs: add CSI documentation (#11203) 
* docs: add CSI documentation

* Fix typos

* Improvements

* Improvements

* Update website/content/docs/platform/k8s/csi/installation.mdx

Co-authored-by: Tom Proctor <tomhjp@users.noreply.github.com>

* Update website/content/docs/platform/k8s/csi/index.mdx

Co-authored-by: Tom Proctor <tomhjp@users.noreply.github.com>

* Update website/content/docs/platform/k8s/csi/index.mdx

Co-authored-by: Tom Proctor <tomhjp@users.noreply.github.com>

* Update website/content/docs/platform/k8s/csi/index.mdx

Co-authored-by: Tom Proctor <tomhjp@users.noreply.github.com>

* Update website/content/docs/platform/k8s/csi/configurations.mdx

Co-authored-by: Tom Proctor <tomhjp@users.noreply.github.com>

* Update website/content/docs/platform/k8s/csi/configurations.mdx

Co-authored-by: Tom Proctor <tomhjp@users.noreply.github.com>

* Update website/content/docs/platform/k8s/csi/index.mdx

Co-authored-by: Tom Proctor <tomhjp@users.noreply.github.com>

* Update website/content/docs/platform/k8s/csi/index.mdx

Co-authored-by: Tom Proctor <tomhjp@users.noreply.github.com>

* Update website/content/docs/platform/k8s/csi/index.mdx

Co-authored-by: Tom Proctor <tomhjp@users.noreply.github.com>

* Update website/content/docs/platform/k8s/csi/index.mdx

Co-authored-by: Tom Proctor <tomhjp@users.noreply.github.com>

* Update website/content/docs/platform/k8s/csi/index.mdx

Co-authored-by: Tom Proctor <tomhjp@users.noreply.github.com>

* Update website/content/docs/platform/k8s/csi/examples.mdx

Co-authored-by: Tom Proctor <tomhjp@users.noreply.github.com>

* Update website/content/docs/platform/k8s/csi/examples.mdx

Co-authored-by: Tom Proctor <tomhjp@users.noreply.github.com>

* Update website/content/docs/platform/k8s/csi/examples.mdx

Co-authored-by: Tom Proctor <tomhjp@users.noreply.github.com>

* Update website/content/docs/platform/k8s/csi/examples.mdx

Co-authored-by: Tom Proctor <tomhjp@users.noreply.github.com>

* review feedback

* Fix typo

* Update website/content/docs/platform/k8s/csi/index.mdx

Co-authored-by: Tom Proctor <tomhjp@users.noreply.github.com>

* Update website/content/docs/platform/k8s/csi/index.mdx

Co-authored-by: Tom Proctor <tomhjp@users.noreply.github.com>

Co-authored-by: Tom Proctor <tomhjp@users.noreply.github.com>
 2021-03-26 11:08:55 -04:00
Kyle MacDonald a3272e7276
website: revert …/integrated-storage path (#11204) 
this path was recently changed to /integratedstorage but broke some existing links.
 2021-03-25 16:31:20 -04:00
Alex Cahn 284af1cf4b
Adding HSM PKI plugin (#11207) 
Adding a newly discovered community plugin
 2021-03-25 12:13:37 -07:00
Hridoy Roy 69bde9ec9b
website: fix for ff3-1 doc formatting (#11206) 2021-03-25 14:56:47 -04:00
Jason O'Donnell 081d3e9f03
docs: update vault-helm to 0.10.0 (#11200) 
* docs: update vault-helm to 0.10.0

* Missing codeblock

* Update website/content/docs/platform/k8s/helm/configuration.mdx

Co-authored-by: Tom Proctor <tomhjp@users.noreply.github.com>

* Update website/content/docs/platform/k8s/helm/configuration.mdx

Co-authored-by: Tom Proctor <tomhjp@users.noreply.github.com>

* Update website/content/docs/platform/k8s/helm/configuration.mdx

Co-authored-by: Tom Proctor <tomhjp@users.noreply.github.com>

Co-authored-by: Tom Proctor <tomhjp@users.noreply.github.com>
 2021-03-25 14:53:45 -04:00
Meggie 335dc8423a
Fixing some typos (#11195) 2021-03-25 10:51:31 -04:00
Baljeet Singh 646bddd89a
update transform.mdx (#11105) 
Typo on path of creating/updating transformation in api docs. 
Fixed by updating `transform/transformation` to `transform/transformations`
 2021-03-24 20:10:27 -05:00
Meggie 11f9c4156f
Update website for 1.7.0 (#11193) 
* Stub upgrade guide and version update

* Finalizing upgrade notes

* Fixing clobbered barrier notes
 2021-03-24 17:32:23 -04:00
Darshana Sivakumar 5f2995f66b
Create 1.7.0.mdx (#11185) 
* Create 1.7.0.mdx

Release notes for Vault 1.7

* Added sidebar, headings

We needed the sidebar and I thought the headings looked better than the
bold text.

* Updated per a note from Darshana

Co-authored-by: Meggie Ladlow <meggie@hashicorp.com>
 2021-03-24 17:13:28 -04:00
Alex Milowski ffad2c6eb2
Added Redis Enterprise database plugin (#11111) 
Added the link to the Redis Enterprise database plugin GitHub repository.
 2021-03-24 12:17:37 -07:00
Nick Cabatoff dbce98c1bb
Client controlled consistency docs (#10990) 2021-03-24 15:09:01 -04:00
Vishal Nayak 2c161a6f6b
Autopilot Docs (#11167) 2021-03-24 10:29:10 -04:00
Austin Gebauer 1eee383ecf
Updates documentation for key management secrets engine (#11172) 2021-03-23 14:14:25 -07:00
Jim Kalafut a9dfaeb765
Update AWS Auth docs for deprecated terms and endpoints (#11146) 2021-03-22 14:15:19 -07:00
Nick Cabatoff e2aadfc157
Update docs for agent's new vault.retry stanza. (#11151) 2021-03-22 12:50:59 -04:00
Vishal Nayak 04876c05fe
Update raft api docs (#10893) 
* Update raft api docs

* Update website/content/api-docs/system/storage/raft.mdx

Co-authored-by: Nick Cabatoff <ncabatoff@hashicorp.com>

* Update website/content/api-docs/system/storage/raft.mdx

Co-authored-by: Brian Kassouf <briankassouf@users.noreply.github.com>

* Update website/content/api-docs/system/storage/raft.mdx

Co-authored-by: Brian Kassouf <briankassouf@users.noreply.github.com>

Co-authored-by: Nick Cabatoff <ncabatoff@hashicorp.com>
Co-authored-by: Brian Kassouf <briankassouf@users.noreply.github.com>
 2021-03-20 00:46:08 -04:00
Jason O'Donnell 921979a40f
docs: update vault-k8s to 0.9.0 (#11138) 
* docs: update vault-k8s to 0.9.0

* Fix typos

* Update website/content/docs/platform/k8s/injector/examples.mdx

Co-authored-by: Theron Voran <tvoran@users.noreply.github.com>

* Update website/content/docs/platform/k8s/injector/annotations.mdx

Co-authored-by: Theron Voran <tvoran@users.noreply.github.com>

* Add links for auto-auth

Co-authored-by: Theron Voran <tvoran@users.noreply.github.com>
 2021-03-19 11:34:58 -04:00
Scott Miller 689dd3722f
Document mysql (#11112) 
* Document MySQL

* Document snapshot, restore, and export-decoded (#11110)

* Update website/content/api-docs/secret/transform.mdx

Co-authored-by: Josh Black <raskchanky@users.noreply.github.com>

* Add parseTime note

Co-authored-by: Josh Black <raskchanky@users.noreply.github.com>
 2021-03-19 10:34:41 -05:00
Josh Black 5fcc629847
Add log shipper configuration docs (#11014) 
* Add log shipper configuration docs

* Fix indentation issue

* Add telemetry

* Updates to logshipper docs

* Add CCC related replication config docs. (#11087)

Co-authored-by: Josh Black <raskchanky@users.noreply.github.com>

* Correct formatting

Co-authored-by: Nick Cabatoff <ncabatoff@hashicorp.com>
 2021-03-18 16:41:13 -07:00
Scott Miller 535bcf289e
Fix handling of minimum operations, and forward rotate/config requests to Primary (#11116) 
* Boost max_operations to the greater of that specified or absoluteMinOperations

* Forward rotation config requests to the primary

* Reject rotation configs outside the min/max range

* Minor wording fix
 2021-03-18 15:08:47 -05:00
Clint 5353279e75
Add command to look up a lease by ID (#11129) 
* snapshot

* basic test

* update command and add documentation

* update help text

* typo

* add changelog for lease lookup command

* run go mod vendor

* remove tabs from help output
 2021-03-18 11:11:09 -05:00
aphorise eb36b68710
Corrected links for Consul Consistency Modes (#10862) 2021-03-17 16:05:30 -07:00
aphorise 5b6e2bb77a
Docs - Plugin register operator & example add (#10864) 2021-03-17 16:04:51 -07:00
Hridoy Roy 261e7c6b17
Docs: Key Rotation For Tokenization [VAULT-1482] (#10921) 
* first docs pass

* filled in read output

* transform docs changes

* transform docs changes

* transform docs changes

* transform docs changes

* transform docs changes

* transform docs changes

* transform docs changes
 2021-03-17 14:29:13 -07:00
Brad 266582628a
Add missing option to raft storage docs (#11041) 2021-03-17 17:25:28 -04:00
Andy Assareh 4ce8896b29
Add note that static role is rotated upon creation (#11126) 
It does not appear to be documented that Vault must rotate the password upon static role creation in order to know the password, as it is not provided.
 2021-03-17 11:27:04 -05:00
Austin Gebauer f5e7c2d9a8
Updates docs for jwt_supported_algs in JWT/OIDC auth method (#11115) 2021-03-16 14:17:53 -07:00
Hridoy Roy e9e83ff864
Add FF3-1 Tweak Guidance Docs [VAULT-1036] (#10978) 
* ff3 guidance docs

* docs upgrade

* address PR comments
 2021-03-16 07:57:50 -07:00
Alvaro Miranda Aguilera 3fb284c217
Update oracle.mdx (#11101) 2021-03-15 14:13:40 -06:00
Scott Miller da982c3982
Upgrade notes for the transform engine upgrade bug fix. (#11098) 
* Add upgrade notes for the Transform storage upgrade bug

* sidenav

* Reword to encourage upgrade when available
 2021-03-12 19:59:50 -06:00
Mark Gritter 8bbf92ef70
Fix typo in limits.mdx (#11103) 2021-03-12 15:46:41 -06:00
Scott Miller c4e8d51c9d
Add upgrade notes for the Transform storage upgrade bug (#11075) 
* Add upgrade notes for the Transform storage upgrade bug

* sidenav
 2021-03-11 11:23:19 -06:00
Jacob Friedman 5305c439d4
Update init.mdx (#11044) 
* Update init.mdx

Updated operator init documentation to try to avoid steering customers towards running Auto Unseal seals with recovery-shares=1 and recovery-threshold=1. This is a bad security posture, as it can allow a single user with access to that recovery share to create root tokens and do other very sensitive tasks.

Also rewrote parts of the HSM/KMS Options section to indicate that recovery-related options are not solely for HSM-mode Vault but are for ANY Auto Unseal seal.

* Update website/content/docs/commands/operator/init.mdx

Adding an appropriate number of recovery-pgp-keys

Co-authored-by: Yoko <yoko@hashicorp.com>

Co-authored-by: Yoko <yoko@hashicorp.com>
 2021-03-04 15:57:47 -08:00
Michele Degges 9741f51bee
Removing broken link (#11029) 2021-03-02 12:02:59 -08:00
swayne275 d74f82346b
Add Partial Month Client Count API for Activity Log (#11022) 
* sketch out partial month activity log client API

* unit test partialMonthClientCount

* cleanup api

* add api doc, fix test, update api nomenclature to match existing

* cleanup

* add PR changelog file

* integration test for API

* report entities and tokens separately
 2021-03-01 16:15:59 -07:00
Brian Kassouf 1bc410783d OSS/ENT Drift 2021-03-01 10:51:04 -08:00
Scott Miller 1e1f7eff46
Documentation for barrier autorotation (#11027) 
* Documentation for barrier autorotation

* changelog

* 1.7 upgrade notes
 2021-03-01 10:45:22 -06:00
Brian Kassouf a112161f60
expiration: Add a few metrics to measure revoke queue lengths (#10955) 
* expiration: Add a few metrics to measure revoke queue lengths

* Update the metric names

* Add appropriate cluster labels

* Add metrics to docs

* Update jobmanager.go
 2021-02-26 16:00:39 -08:00
Michael Golowka 302cc4870e
Add Username Templating Concepts page (#10935) 2021-02-26 16:04:12 -07:00
Tom Proctor 45d9efd0c2
Add notice about MongoDB Atlas whitelist deprecation (#10967) 2021-02-26 20:38:27 +00:00
Lauren Voswinkel 075898cf73
Add IAM tagging support for iam_user roles in AWS secret engine (#10953) 
* Added support for iam_tags for AWS secret roles

This change allows iam_users generated by the secrets engine
to add custom tags in the form of key-value pairs to users
that are created.
 2021-02-25 16:03:24 -08:00
Jim Kalafut e60cc11f33
Add configurable exponential backoff to Agent auto-auth (#10964) 2021-02-23 12:04:21 -08:00
Clint b0b121753a
update docs related to OCI alias changes (#10952) 
* update docs related to OCI alias changes

* covert CHANGELOG update to a changelog/ entry
 2021-02-23 10:08:15 -06:00
Jim Kalafut 4b1557e6ab
Minor update to Secrets engine overview docs (#10977) 
The reference to API calls and link to code isn't a good fit here.

Reverts eb3e34d
 2021-02-23 07:17:44 -08:00
Clint f998f96451
Add documentation for upcoming Terraform Cloud secret engine (#10823) 
* add side navigation for Terraform Cloud Secret Engine

* terraform cloud engine docs

* add api-docs for terraform cloud secret engine

* fix some typos and improve wording, now with less management

* fix capitalization

* change text->shell-session

* clarify rotating user roles returns an error
 2021-02-22 10:57:52 -06:00
Jim Kalafut 7e54bc15c2
Add TOTP support to Okta Auth (#10942) 2021-02-21 21:18:17 -08:00
Austin Gebauer 0017b78919
Adds API docs for max_age role parameter of JWT/OIDC auth method (#10916) 2021-02-19 13:39:58 -08:00
Nick Cabatoff 81105274d1
Add docs for Agent's template_retry option added in #10644, based on those from consul-template configuration. Also fix some existing config docs that weren't adhering to our conventions. (#10911) 2021-02-18 11:24:36 -08:00
Brian Fox 7f6ec265a1
Update KV Secrets Engine index (#10933) 
Just a suggestion on how to perhaps improve the language as I found myself re-reading the sentences due to the missing "either ... or ..." having been _told_ that it `can be run in two modes`.
 2021-02-17 14:27:37 -08:00
Nick Cabatoff 1b789f5ae5
Note that all local mounts are impacted, including on primary. (#10807) 2021-02-16 10:37:37 -05:00
Rosemary Wang a48db957ca
docs: Update Azure AD OIDC documentation (#10853) 
Addresses #8191 with clearer external groups configuration.
 2021-02-12 17:28:00 -08:00
Mark Gritter a8d2e6e350
Added a table showing the entity alias name used by each auth method. (#10908) 
* Also corrected the text about token auth method.
 2021-02-11 18:34:45 -06:00
aphorise 17003328ab
Docs - Namespace monitoring corrected examples (#10863) 
Re-doing PR #10305
 2021-02-11 11:32:52 -06:00
Tom Proctor 5f9891f992
auth/kubernetes docs: Correct default issuer (#10900) 
As per 207d1b4c1c/path_login.go (L24), the default issuer when none is set is `kubernetes/serviceaccount`.
 2021-02-11 15:26:34 +00:00
Vishal Nayak 53cb1deb38
Revert "Read-replica instead of non-voter (#10875)" (#10890) 
This reverts commit fc745670cf34821f5834357d9caebc3351dbc1e7.
 2021-02-10 16:41:58 -05:00
Vishal Nayak a2394e7353
Read-replica instead of non-voter (#10875) 2021-02-10 09:58:18 -05:00
Jim 7cb100e9a7
Update kubernetes.mdx (#10871) 
Add suggestion to validate K8S cluster address and TCP port using cluster-info command and update sample config (line 77) to prompt for validation. Feedback from prospect was that doc is misleading since our sample uses TCP 8443.
 2021-02-09 14:50:31 -05:00
jonZlotnik 541079dec3
both serviceaccount and namespace can be splat (#10829) 
Needs to be changed in the docs.
Please see commit 70bc47384bedfc895d08d1df17a45b0c4ea8b6de
 2021-02-09 11:14:13 -08:00