Commit Graph

1472 Commits

Author SHA1 Message Date
Angel Garbarino 89de6267c7
Allow AWS secret engine to send empty policy document (#23470) (#23509)
* fix

* changelog

Co-authored-by: claire bontempo <68122737+hellobontempo@users.noreply.github.com>
2023-10-08 13:10:35 -06:00
hc-github-team-secure-vault-core f4453384cb
events: Ignore send context (#23500) (#23538)
When sending an event asynchronously, the original context used for
whatever generated the event (probably a synchronous, quick HTTP
context) is probably not what is wanted for sending the event, which
could face delays if a consumer is backed up.

I will admit myself to sometimes having "context blindness", where
I just take whatever context is incoming in a function and thread it
out to all calls. Normally this is the right thing to do when, say,
tying downstream API calls to an upstream HTTP timeout.

When making KV events, for example, we used the HTTP context for
`SendEvent()`, and this can cause the events to be dropped if they
aren't taken from the channel before the HTTP request finishes.

In retrospect, it was probably unnecessary to include a context in
the `SendEvent` interface.

We keep the context in place for backwards compability, but also in
case we want to use it for purposes other than timeouts and
cancellations in the future.

Co-authored-by: Christopher Swenson <christopher.swenson@hashicorp.com>
2023-10-05 21:35:10 +00:00
hc-github-team-secure-vault-core cf7c5ee6d9
backport of commit cbb96b230c296402341aba11fc1cf41d4f9c2e25 (#23524)
Co-authored-by: Jordan Reimer <zofskeez@gmail.com>
2023-10-05 09:54:03 -06:00
hc-github-team-secure-vault-core c90b7cddb7
backport of commit 9019203e9f052b6e58a14cbfab4a559d5e7e5883 (#23491)
Co-authored-by: Conor McCullough <103977699+conor-mccullough@users.noreply.github.com>
2023-10-04 09:13:33 -05:00
hc-github-team-secure-vault-core 28f2585da3
backport of commit 0fa36a36ae1b4842d96623eef0d20af5dea557c0 (#23443)
Co-authored-by: Paul Banks <pbanks@hashicorp.com>
2023-10-02 09:49:05 -07:00
hc-github-team-secure-vault-core f761e5c1ee
backport of commit a3936f14679e34b5b84e88e94cc301704cf1df10 (#23372)
Co-authored-by: Marc Boudreau <marc.boudreau@hashicorp.com>
2023-09-28 13:16:28 -07:00
hc-github-team-secure-vault-core d8d5e440fe
backport of commit 547bff752e056ff81d4359267e0f8afa4629f505 (#23321) 2023-09-27 16:03:53 -04:00
hc-github-team-secure-vault-core c08d731634
backport of commit dbfaa6f81a156ec1dcb85d8d76941d4ac70c91fb (#23285)
Co-authored-by: Steven Clark <steven.clark@hashicorp.com>
2023-09-26 18:18:06 +00:00
claire bontempo ab1f3c8b83
cherry pick (#23264) 2023-09-22 21:29:05 +00:00
Chelsea Shaw 36452c0849
UI: add pagination to new PKI (#23193) (#23239)
* UI: add pagination to new PKI (#23193)

* fixes store type import

* fixes tests

---------

Co-authored-by: Jordan Reimer <zofskeez@gmail.com>
2023-09-22 10:47:55 -06:00
hc-github-team-secure-vault-core c29b24b07d
backport of commit 1d61aeb8aebc96eecbb6a35e10bd914b4d0f41f4 (#23250)
Co-authored-by: Sergey Kutovoy <kutovoy.s@gmail.com>
2023-09-22 09:06:23 -07:00
hc-github-team-secure-vault-core b783dec8fd
backport of commit 8b126987807be3593f70ffd8b49b2d90406d7aea (#23235)
Co-authored-by: claire bontempo <68122737+hellobontempo@users.noreply.github.com>
2023-09-21 21:26:20 +00:00
hc-github-team-secure-vault-core 3505868165
backport of UI: handle control group error on SSH (#23034)
Co-authored-by: Chelsea Shaw <82459713+hashishaw@users.noreply.github.com>
2023-09-20 16:18:57 +00:00
Kianna 3ba22f14e0
Backport 1.14.3: confirm delete modal for namespaces (#23109)
* Possible soln 1: add a class w/ min height instead of calculated height

* Remove confirm-height style

* Add changelog

* Fix changelog

* Possible soln 2: apply style using native js

* Remove copyright since 1.14 didnt have
2023-09-20 09:15:52 -06:00
hc-github-team-secure-vault-core 693ba0eddc
backport of commit c73eacbaf6ae6b5860e1ad9a3b6ce930c093a105 (#23174)
Co-authored-by: akshya96 <87045294+akshya96@users.noreply.github.com>
2023-09-19 19:54:42 +00:00
hc-github-team-secure-vault-core bf9114d772
Backport of UI: [VAULT-18178] Fix filter/search bug in search secrets engines into release/1.14.x (#23130)
Co-authored-by: Kianna <30884335+kiannaquach@users.noreply.github.com>
2023-09-18 17:59:01 +00:00
hc-github-team-secure-vault-core 0a443e1d34
backport of commit 3f9b6075aaa1ca3e4c4065b0a460c3bd80b1afd9 (#23127)
Backport of UI: add SSH role attribute allowed_domains_template
Co-authored-by: Chelsea Shaw <82459713+hashishaw@users.noreply.github.com>
2023-09-15 21:56:40 +00:00
hc-github-team-secure-vault-core 28c15e2a98
backport of commit e2ff1f1c7117574888db91b4b6027be24533d718 (#23030)
Co-authored-by: Alexander Scheel <alex.scheel@hashicorp.com>
2023-09-12 21:18:03 +00:00
hc-github-team-secure-vault-core 234c9ff772
Backport of UI: [VAULT-18040] List all features in license info into release/1.14.x (#23005)
Co-authored-by: Kianna <30884335+kiannaquach@users.noreply.github.com>
2023-09-12 09:48:06 -07:00
Hamid Ghaf f0cfec5bca
bump go version to 1.20.8 on 1.14.x (#22936)
* bump go version to 1.20.8 on 1.14.x

* go mod tidy
2023-09-08 19:20:04 +00:00
hc-github-team-secure-vault-core bdee24128a
backport of commit 7d4d8cb708de62167340fa84770f8237c7bfdd1e (#22900)
Co-authored-by: Scott Miller <smiller@hashicorp.com>
2023-09-08 14:48:26 +00:00
hc-github-team-secure-vault-core d019802cc0
backport of commit 3130e8ba9483e10e6191d264dc97b597462bf7c1 (#22868) 2023-09-07 20:08:01 +00:00
Scott Miller ba9806c971
Update go-kms-wrapping to get Azure HTTP/2 workaround (1.14.x) (#22768)
* Update go-kms-wrapping to get Azure HTTP/2 workaround (1.14.x)

* changelog
2023-09-05 14:28:48 -05:00
hc-github-team-secure-vault-core fc918919eb
backport of commit fcd6f01761c6ca0c481b29591df26e0e59fd1f95 (#22759)
Co-authored-by: Cinthia Conti <cinthiaconti@gmail.com>
2023-09-05 13:01:38 -04:00
hc-github-team-secure-vault-core d2eb98e2cf
backport of commit f150a5259335117632d094bdf33ead0209172654 (#22756)
Co-authored-by: Alexander Scheel <alex.scheel@hashicorp.com>
2023-09-05 11:00:07 -04:00
hc-github-team-secure-vault-core d52cf3c46d
backport of commit 4c8cc87794ed2d989f515cd30c1c1b953d092ef3 (#22247)
Co-authored-by: Mike Palmiotto <mike.palmiotto@hashicorp.com>
2023-09-01 13:02:28 -04:00
hc-github-team-secure-vault-core a7f3af73ed
backport of commit 4e963c4c5bbd00d4150df1bc0d140bba43feb407 (#22704)
Co-authored-by: Jason O'Donnell <2160810+jasonodonnell@users.noreply.github.com>
2023-09-01 09:18:05 -04:00
hc-github-team-secure-vault-core cb0784b87f
Add config value that gives users options to skip calculating role for each lease (#22651) (#22730)
* Add config value that gives users options to skip calculating role for each lease

* add changelog

* change name

* add config for testing

* Update changelog/22651.txt



* update tests, docs and reorder logic in conditional

* fix comment

* update comment

* fix comment again

* Update comments and change if order

* change comment again

* add other comment

* fix tests

* add documentation

* edit docs

* Update http/util.go



* Update vault/core.go

* Update vault/core.go

* update var name

* udpate docs

* Update vault/request_handling.go



* 1 more docs change

---------

Co-authored-by: Ellie <ellie.sterner@hashicorp.com>
Co-authored-by: Violet Hynes <violet.hynes@hashicorp.com>
Co-authored-by: Mike Palmiotto <mike.palmiotto@hashicorp.com>
2023-09-01 08:07:47 -05:00
hc-github-team-secure-vault-core 4eb71df565
backport of commit 727c73cbd1ff3341ea7a19420f36dc8bd0dd8848 (#22684)
Co-authored-by: Luis (LT) Carbonell <lt.carbonell@hashicorp.com>
2023-08-31 13:18:25 +00:00
hc-github-team-secure-vault-core 238f5be13c
backport of commit c4a8b23d933fcbd65647ffabfcb0b4c1809a57e9 (#22637)
Co-authored-by: Mike Palmiotto <mike.palmiotto@hashicorp.com>
2023-08-30 15:28:32 +00:00
hc-github-team-secure-vault-core d13671c155
backport of commit cccfdb088f218f5631195e8b653c07a77cfac2b5 (#22596)
Co-authored-by: Ellie <ellie.sterner@hashicorp.com>
2023-08-28 18:16:57 -05:00
hc-github-team-secure-vault-core a5f177f430
Backport of UI: Fix blank secret on KV create > cancel
Co-authored-by: Chelsea Shaw <82459713+hashishaw@users.noreply.github.com>
2023-08-23 23:07:53 +00:00
Chelsea Shaw c7ede64578
Backport UI: Allow navigate to list from View Secret card (#22502) (#22538) 2023-08-23 22:23:35 +00:00
John-Michael Faircloth 1bf536eebd
Update hashicorp/vault-plugin-database-snowflake to v0.9.0 (#22516) (#22527)
* Automated dependency upgrades

* Add changelog

---------

Co-authored-by: hc-github-team-secure-vault-core <82990506+hc-github-team-secure-vault-core@users.noreply.github.com>
Co-authored-by: hc-github-team-secure-vault-ecosystem <hc-github-team-secure-vault-ecosystem@users.noreply.github.com>
2023-08-23 17:17:22 -05:00
hc-github-team-secure-vault-core 50bd40ec02
backport of commit e29d98aadb6557921e5d509f3b967e3262f22cb9 (#22526)
Co-authored-by: Nick Cabatoff <ncabatoff@hashicorp.com>
2023-08-23 15:23:35 +00:00
Alexander Scheel dfa43e537d
Bump go version to 1.20.7 on Vault 1.14.x (#22498)
* Bump go version to 1.20.7 on Vault 1.14.x

Signed-off-by: Alexander Scheel <alex.scheel@hashicorp.com>

* Update to Docker v24.0.5 to fix host header issue

Signed-off-by: Alexander Scheel <alex.scheel@hashicorp.com>

---------

Signed-off-by: Alexander Scheel <alex.scheel@hashicorp.com>
2023-08-22 15:09:26 -04:00
hc-github-team-secure-vault-core 2e131c1459
backport of commit 35a5fbfc6002e0440c708e722dc8aabbcb7a81b2 (#22507)
Co-authored-by: Max Bowsher <maxbowsher@gmail.com>
2023-08-22 18:48:14 +00:00
hc-github-team-secure-vault-core 1dec6a7930
Backport of UI: Enable KV create secret with control group
Co-authored-by: Chelsea Shaw <82459713+hashishaw@users.noreply.github.com>
2023-08-21 16:58:26 -05:00
hc-github-team-secure-vault-core 3359f987ac
backport of commit 75eebddba9fe7d25aa1b12f6c3633bbf180ee630 (#22477)
Co-authored-by: Josh Black <raskchanky@gmail.com>
2023-08-21 20:29:09 +00:00
hc-github-team-secure-vault-core 14cdb082bc
backport of commit abd6324e50d6d785a4c51ea1a84c003b73aabdaf (#22465)
Co-authored-by: claire bontempo <68122737+hellobontempo@users.noreply.github.com>
2023-08-21 10:10:15 -07:00
hc-github-team-secure-vault-core 386d78180c
backport of commit 4654c15248013edeb36fdeae28ab3631bebe0a8e (#21188) 2023-08-18 09:09:32 -04:00
hc-github-team-secure-vault-core ae5b6c9914
backport of commit ef0872f6cf6229ad59585ecf98f427ab56989922 (#22431)
Co-authored-by: Josh Black <raskchanky@gmail.com>
2023-08-17 23:05:29 +00:00
hc-github-team-secure-vault-core e98cd02fa0
backport of commit c2ba113defbd98a6cd749dcd13f734b911241c98 (#22423)
Co-authored-by: akshya96 <87045294+akshya96@users.noreply.github.com>
2023-08-17 14:41:15 -07:00
hc-github-team-secure-vault-core 63ccd41bad
backport of commit a58d650e58d377caaf2f06a5693bad8faac51395 (#22417)
Co-authored-by: Markus Cisler <bl1nk@users.noreply.github.com>
2023-08-17 21:11:56 +00:00
hc-github-team-secure-vault-core f0992b323f
backport of commit 2c6a3e72d52297e71a5606fc71ce1a8781dc94aa (#22405)
Co-authored-by: claire bontempo <68122737+hellobontempo@users.noreply.github.com>
2023-08-17 17:18:38 +00:00
hc-github-team-secure-vault-core 49b9a35e01
backport of commit ce4b2675b1ed50e9aa08c78c1a94f5e63c693277 (#22391)
Co-authored-by: Jordan Reimer <zofskeez@gmail.com>
2023-08-17 09:24:12 -06:00
hc-github-team-secure-vault-core b82a26bb49
backport of commit abaf1d68743dd65af8919f56687061eb29c4bdbe (#22379) 2023-08-16 20:27:19 +00:00
hc-github-team-secure-vault-core b30f78f66a
Ignore errors from rollback manager invocations (#22235) (#22238)
* Ignore errors from rollback manager invocations

During reload and mount move operations, we want to ensure that errors
created by the final Rollback are not fatal (which risk failing
replication in Enterprise when the core/mounts table gets invalidated).
This mirrors the behavior of the periodic rollback manager, which
only logs the error.

This updates the noop backend to allow failing just rollback operations,
which we can use in tests to verify this behavior and ensure the core
operations (plugin reload, plugin move, and seal/unseal) are not broken
by this. Note that most of these operations were asynchronous from the
client's PoV and thus did not fail anyways prior to this change.



* Add changelog entry



* Update vault/external_tests/router/router_ext_test.go



---------

Signed-off-by: Alexander Scheel <alex.scheel@hashicorp.com>
Co-authored-by: Alexander Scheel <alex.scheel@hashicorp.com>
Co-authored-by: Nick Cabatoff <ncabatoff@hashicorp.com>
2023-08-16 17:34:37 +00:00
hc-github-team-secure-vault-core f8cc240ab5
backport of commit 5a60c98a464af99c44a1eb62655ede2af3c85ff5 (#22370)
Co-authored-by: Nick Cabatoff <ncabatoff@hashicorp.com>
2023-08-16 10:48:12 -04:00
hc-github-team-secure-vault-core e9f394c549
backport of commit 5374b3b046d13d3e7a9f6833efcaeff0e49fddc4 (#22366)
Co-authored-by: Hamid Ghaf <83242695+hghaf099@users.noreply.github.com>
2023-08-16 07:16:42 -07:00