luxolus/open-vault
2
0
Fork 0
Code Issues 1 Pull requests Releases Activity
14187 commits 1 branch 0 tags 214 MiB
Commit graph

271 commits

Author SHA1 Message Date
aphorise f4c1a09e25
Docs: Seal pkcs11 updated example with actual hex slot reference and … (#12530) 
* Docs: Seal pkcs11 updated example with actual hex slot reference and notes related to decimal conversion. Minor correction to **Note** area in 'lib' parameter above 'slot'.

* Docs: Seal pkcs11 slot note correction.
 2021-09-22 16:55:20 -04:00
Kamal Mahmud 9c0e439d33
Add additional info on v1 KV engine (#12522) 
Added information flag to enable v1 KV secret engine in dev mode
 2021-09-22 13:31:46 -07:00
Nick Cabatoff 4cca2e0303
Update telemetry docs to include HA forwarding metrics. (#12611) 2021-09-22 12:10:26 -04:00
Tom Proctor 181269f8e1
Revert "Update installation.mdx (#12516)" (#12571) 
This reverts commit ab5ad87945177dd0bab6cbcfdf6cc8507bba8c5d.
 2021-09-22 11:54:25 +01:00
Loann Le b1cff88fff
added browswer support (#12587) 2021-09-21 13:48:21 -07:00
Yoko Hyakuna 8a122201bc
Add code snippet to demonstrate GCP auth in Go (#12578) 
* Add code snippet to demonstrate GCP auth in Go

* Fix a grammatical error
 2021-09-17 20:51:07 -07:00
Pratyoy Mukhopadhyay 0819eac6a8
Update token renew docs (#12572) 
* Update docs for token renew api and cli

* Clarify api docs for renew/renew-self

* Update wording around periodic tokens
 2021-09-16 16:54:46 -07:00
Theron Voran b2418a3a8c
docs: vault-k8s 0.13.0 and vault-helm 0.16.0 (#12573) 2021-09-16 14:58:02 -07:00
Meggie 78bb7d3808
Some docs notes (seal migration + go discover link) (#12542) 
* Was confused by pre1.5.1 auto->auto note

* Helpful note on go-discover
 2021-09-16 10:22:38 -04:00
Mitali Bisht 89271bf0ca
Added Artifactory secrets plugin (#12528) 
* Added Artifactory secrets plugin

Added Artifactory secrets vault plugin under partner programs

* Update plugin-portal.mdx
 2021-09-13 15:30:31 -07:00
Aaditya S fbe2462420
Fix typo in lease renew documentation (#10651) 
The documentation for `renew` is showing the output for `revoke`.
 2021-09-13 11:57:10 -07:00
Lukas Grossar 2f025ef30f
Add link to go-discover README to raft documentation (#10679) 2021-09-10 14:40:36 -07:00
Mike Green 68c561389f
add example for secret tuning (#12503) 2021-09-10 09:10:33 -07:00
Justin Weissig 8a721ef225
docs: update packaging (#12527) 
* docs: update packaging

Update language to support current enterprise packaging.

* Update performance-standby.mdx
 2021-09-09 14:36:15 -07:00
Theron Voran ed1088d81c
docs: k8s auth issuer lookup (#12506) 
Moved the issuer discovery details to from the CSI docs to the K8s
auth docs.
 2021-09-09 08:39:21 -07:00
Jim Kalafut 162d9eb095
Update 1.8 upgrade guide (#12518) 2021-09-08 13:14:51 -07:00
Alex Cahn dd0f3d9f2d
Update installation.mdx (#12516) 
Updating based upon feedback from ServiceNow review
 2021-09-08 12:57:15 -07:00
klucks83 eca34706d7
Update Auto Unseal info to say KMS instead of EKS (#10256) 
While EKS may be the managed kubernetes environment under the hood, I believe the idea behind this section of the documentation is to use AWS KMS for seal/unseal operations, not EKS.  (i.e. The surrounding documentation is discussing other Auto Unseal options such as Google KMS.)  

The use of the term EKS instead of KMS made it hard for me to discover this section of documentation, and was a little confusing at first until I realized the possible error.
 2021-09-08 10:06:24 -07:00
Justin Weissig 718a5f04c9
docs: update packaging (#12459) 
* [WIP] docs: update packaging

Update language to support current enterprise packaging.

* Update index.mdx

* Update entropy-augmentation.mdx

* Update entropy-augmentation.mdx

* Update control-groups.mdx

* Update sealwrap.mdx

* Update index.mdx

* Update control-groups.mdx

* Update entropy-augmentation.mdx

* Update index.mdx

* Update index.mdx

* Update sealwrap.mdx

* Update index.mdx

* Update index.mdx

* Update index.mdx
 2021-09-08 08:59:25 -07:00
mickael-hc d2310302a1
docs: provide clarifications for github auth method and ssh secrets engine (#12495) 
* Clarify that any org GitHub user token can be used

* Clarify ssh secrets allowed_extensions behaviors
 2021-09-08 10:55:35 -05:00
Rowan Smith b4dbd46928
audit page tweaks based on customer feedback (#12504) 2021-09-08 09:21:36 -04:00
Nicholas Seemiller 8bc69a4ccc
Update examples.mdx (#12333) 
Deployment manifest has incorrect `envs` tag. It should be `env`
 2021-09-07 17:32:22 -04:00
Pratyoy Mukhopadhyay 448ba32bf4
Update kv input documentation with edge case (#12500) 2021-09-07 13:15:33 -07:00
Pratyoy Mukhopadhyay 994372697b
Remove deprecated reauth function from docs (#12482) 2021-09-03 06:09:21 -07:00
Yoko Hyakuna 7c9b06da99
Fix isues 12397 (#12484) 2021-09-02 17:03:55 -07:00
Zadkiel 6d7ad94097
fix: update injector resources requirements (#11198) 2021-09-02 08:01:02 -07:00
Mike Green c04518044a
Clarify on overview page that audit is default replicated (#12298) 
* Note that audit is replicated

* tweak

* clarify local is to the cluster, not only the node

* tweaking. i think this makes more sense
 2021-09-01 13:53:01 -07:00
Loann Le d385747027
adding ARN in description (#12477) 2021-09-01 13:12:20 -07:00
Nick Cabatoff 8154cd2e4a
Add notes re dangers of identity write endpoints. (#12365) 2021-08-30 10:23:33 -04:00
Meggie 67dcbf1dea
Upgrade note for Alpine 3.14 docker images (#12450) 
* Upgrade note for Alpine 3.14 docker images

It might break things for some people

* Add CVE #

Co-authored-by: mickael-hc <86245626+mickael-hc@users.noreply.github.com>

* Adding upgrade note to all relevant versions

Co-authored-by: mickael-hc <86245626+mickael-hc@users.noreply.github.com>
 2021-08-27 12:33:44 -04:00
Loann Le 97a3fd4287
Seal Migration Doc: Modified existing note (#12444) 
* changed note

* fixed spacing issue

* Update website/content/docs/concepts/seal.mdx

Co-authored-by: Meggie <meggie@hashicorp.com>

* modified intro

Co-authored-by: Meggie <meggie@hashicorp.com>
 2021-08-26 16:06:23 -07:00
Nick Cabatoff 4f30a01068
Remove the old license instructions from the Enterprise index page. (#12400) 2021-08-25 12:16:38 -04:00
Calvin Leung Huang 306071f8b8
docs: fix exit flag reference on agent (#12401) 2021-08-24 14:26:56 -07:00
Meggie 98678e4caf
Upgrade note for RedHat package issue (#12345) 
* Upgrade note for RedHat package issue

* Reverse ordering of upgrade guides

* Refining affected versions
 2021-08-24 13:07:26 -04:00
swayne275 8b033c3c49
add known issue for dr secondary lease count quota invalidation (#12288) 
* add known issue for dr secondary lease count quota invalidation

* Update website/content/partials/lease-count-quota-upgrade.mdx

Co-authored-by: Meggie <meggie@hashicorp.com>

* put known issues to main 1.6 and 1.7 pages

Co-authored-by: Meggie <meggie@hashicorp.com>
 2021-08-23 15:58:06 -06:00
hghaf099 94ece6fd38
Lease count quotas does not apply to root tokens (#12405) 2021-08-23 17:22:28 -04:00
Chris Capurso 3f4a381f1b
Add kv custom key metadata (#12218) 
* add custom-metdata flag to "kv metadata put" command

* add kv metadata put command test for custom-metadata flag

* add custom_metadata to kv-v2 api docs

* add custom_metadata to kv-v2 cli docs

* update go.mod

* Add custom metadata limits to docs

* add changelog entry

* update vault-plugin-secrets-kv to @master
 2021-08-23 15:49:09 -04:00
Theron Voran f90b7104cd
docs: updates for vault-helm-0.15.0 and vault-k8s-0.12.0 (#12373) 
Also simplifies the cert-manager example
 2021-08-23 09:39:36 -07:00
Alex Cahn e4e8555e3a
Fixed a slight grammar mistake (#12356) 2021-08-20 12:08:34 -07:00
Mike Green 16794711d5
Add agent approle method example (#12297) 2021-08-19 11:03:57 -04:00
Meggie 0328598798
Removing line about consul consistency (#12353) 2021-08-19 10:01:47 -04:00
Nick Cabatoff f7cb7a19b2
Add docs for metrics from #11472. (#12278) 2021-08-19 09:49:00 -04:00
Andrei Burd b868dac12c
Docs: k8s annotations for static_secret_render_interval (#12244) 
Co-authored-by: Theron Voran <tvoran@users.noreply.github.com>
 2021-08-18 13:41:16 -07:00
John-Michael Faircloth 30f470915f
docs: draft update guide for identity token roles (#12337) 2021-08-17 11:27:32 -05:00
Loann Le 4e3b66a2d7
Vault Documentation: Added Glossary (#12324) 
* added glossary

* Update website/content/docs/glossary.mdx

Co-authored-by: trujillo-adam <47586768+trujillo-adam@users.noreply.github.com>

* Update website/content/docs/glossary.mdx

Co-authored-by: trujillo-adam <47586768+trujillo-adam@users.noreply.github.com>

* modified secrets and barrier content based on feedback

Co-authored-by: trujillo-adam <47586768+trujillo-adam@users.noreply.github.com>
 2021-08-16 13:08:44 -07:00
Jim Kalafut 75b3dec8be
Add draft upgrade guide (#12332) 2021-08-16 10:58:09 -07:00
Yoko Hyakuna 7cfbc0350d
[Docs] Add code example (#12302) 
* Experiment adding code example

* Add Go code snippet

* Minor updates to the brief description

* Add a note to reference 'Code Example'

* Fix the title

* Add a callout note up front
 2021-08-12 12:53:15 -07:00
Jim Kalafut af57e56f09
Add AWS EC2 Auth known issue (#12316) 2021-08-12 10:45:32 -07:00
Andrei Burd 63de67d891
Agent template static secrets docs update (#12307) 
* Agent template static secrets docs update

static_secret_render_interval mention

* Update website/content/docs/agent/template.mdx

Co-authored-by: Jason O'Donnell <2160810+jasonodonnell@users.noreply.github.com>

Co-authored-by: Jason O'Donnell <2160810+jasonodonnell@users.noreply.github.com>
 2021-08-11 12:30:37 -04:00
hghaf099 f885d97774
VAULT-2285 adding capability to accept comma separated entries for au… (#12126) 
* VAULT-2285 adding capability to accept comma separated entries for auth enable/tune

* Adding changelog

* Adding logic to detect invalid input parameter for auth enable config

* Updating tune.mdx

* Updating secret enable/tune for comma separated parameters

* Adding further parameter checks for auth/secret tests
Fixing changelog
using builtin type for a switch statement
Fixing a possible panic scenario

* Changing a function name, using deep.Equal instead of what reflect package provides

* Fixing auth/secret enable/tune mdx files

* One more mdx file fix

* Only when users provide a single comma separated string in a curl command, split the entries by commas

* Fixing API docs for auth/mount enable/tune for comma separated entries

* updating docs, removing an unnecessary switch case
 2021-08-09 15:37:03 -04:00
Meggie b43f9c10cc
Master -> Main on CL links (#12286) 2021-08-09 12:57:19 -04:00
Theron Voran 3455adc885
docs: vault-k8s and cert-manager (#12281) 
Adding an example of configuring vault-k8s to use cert-manager for
managing the webhook certs.

Co-authored-by: Calvin Leung Huang <1883212+calvn@users.noreply.github.com>
Co-authored-by: Ben Ash <32777270+benashz@users.noreply.github.com>
 2021-08-06 17:56:15 -07:00
Austin Gebauer bf086e8dc6
auth/oidc: documents redirect URI for UI login with form_post response_mode (#12273) 2021-08-05 15:13:33 -07:00
Loann Le 7ef0c4bde9
replaced changelog link (#12259) 2021-08-04 12:07:22 -07:00
Mike Green 65c449063b
Add link to Learn's usage tutorial (#11199) 
* Add link to Learn's usage tutorial

* Update website/content/docs/commands/operator/usage.mdx

Co-authored-by: Tu Nguyen <im2nguyen@users.noreply.github.com>

Co-authored-by: Tu Nguyen <im2nguyen@users.noreply.github.com>
 2021-08-03 16:19:09 -07:00
Jim Kalafut 0c678f14a0
Add link to plugin upgrade instructions (#12043) 2021-08-03 15:58:17 -07:00
mickael-hc 795a5fea43
docs: add barrier key auto-rotation to internals/rotation (#12149) 
This functionality was introduced in Vault 1.7.0 and is documented in api-docs/system/rotate-config
 2021-08-03 15:52:24 -07:00
Meggie 034f09c373
Adding upgrade note about arm64 (#12240) 2021-08-03 11:54:55 -04:00
Jonathan Ballet dd33777d17
Improve "Integrated Storage" documentation (#12200) 
* Improve "Integrated Storage" documentation

* add missing markup
* add more links to the configuration pages

* Improve the Raft Storage configuration page

* More markup

* Improve the "High Availability" documentation

* More links to the configuration pages

* More links

* even more links
 2021-07-30 15:05:15 -07:00
Theron Voran d2e2761aee
docs: updates for vault-k8s v0.11.0 (#12209) 2021-07-29 14:52:29 -07:00
Theron Voran 5e113abbf4
docs: updating for vault-helm v0.14.0 (#12206) 
And found a couple missing values
 2021-07-29 11:16:08 -07:00
Vishal Nayak ab232b9d9a
Update docs to reflect support for autopilot DR (#12097) 
* Update docs to reflect support for autopilot DR

* Reword sentence

* Fix link

* Fix link
 2021-07-29 12:40:27 -04:00
Rowan Smith 8924e7d656
Fixed typo for 'forward' value in relation to caching (#12199) 2021-07-29 07:41:08 -04:00
SaintMalik 4223ddf6fd
Docs: Fix broken link (#12192) 
* Docs: Fix broken link

What does this PR do

Fix dead or broken links in this docs page, making navigation easy for others.

* fixing broken link

* fixing broken links
 2021-07-28 13:18:54 -07:00
akosuadenell 5f57fa205f
Update template.mdx (#11913) 
Deleted duplicate text
 2021-07-28 11:54:15 -07:00
Jim Kalafut 64b7f8eb1a
Add 1.8 release notes (#12190) 2021-07-28 08:54:09 -07:00
Jim Kalafut f86cede572
Add 1.8 upgrade guide (#12186) 2021-07-28 08:46:40 -07:00
John-Michael Faircloth fa9c5dc67c
docs: Update Database Capabilities to include username customization (#12172) 
* docs: Update Database Capabilities to include username customization

* add operator/diagnose to the index file
 2021-07-27 10:33:12 -05:00
Hridoy Roy fff7dc7a40
Diagnose docs + changelog (#12159) 
* save

* diagnose docs

* changelog

* changelog formatting
 2021-07-26 08:45:12 -07:00
Jacob e579cf4ad1
docs/update replication seal table (#12147) 
* Update replication.mdx 

Add separate secondary seal and recovery key columns to better distinguish what is updated in each scenario.

* Update replication.mdx, fix caps.
 2021-07-22 15:41:36 -04:00
Nicholas Seemiller 87ff4bfac8
Create Kubernetes Namespace (#11902) 
If you're setting up vault for the first time on a cluster, the namespace may not exist.

Add a step to create the namespace.
 2021-07-22 15:41:22 -04:00
Nick Cabatoff 9a26209a9d
Fix a couple of broken links to api docs. (#12143) 
* Fix a couple of broken links to api docs.

* Qualify deprecation.
 2021-07-21 13:09:32 -07:00
John-Michael Faircloth 877b8166f2
docs: Update Database Capabilities to include username customization (#12130) 
* Update Database Capabilities docs page to include username customization column

* fix elasticdb entry, yes for 1.8+
 2021-07-21 13:24:22 -05:00
swayne275 ed361ee8da
Fix minor typo in Internals/Plugins documentation (#12113) 
* fix minor plugin doc typo

* fix limits of of typo and related

* forgot to save on this typo fix
 2021-07-20 07:21:24 -06:00
Nick Cabatoff e98b45fc79
Fix license expiration metric name in docs. (#12125) 2021-07-19 19:19:32 -04:00
Pratyoy Mukhopadhyay 3990446e46
Update some metric types, fix some wording (#12122) 2021-07-19 14:54:24 -07:00
Meggie 08de78aedd
Elaborating on telemetry persistence (#12119) 
* Elaborating on telemetry persistence

Some users understand how an aggregator relates to Vault telemetry, and
some users are approaching this concept for the first time. Those newer
to the concepts benefit from some extra clarification that the metrics
sourced directly from Vault aren't stored anywhere.

Sources:
https://prometheus.io/docs/concepts/metric_types/
https://github.com/OpenObservability/OpenMetrics/blob/main/specification/OpenMetrics.md
https://docs.splunk.com/observability/metrics-and-metadata/metric-types.html

* Updated summary note
 2021-07-19 16:12:29 -04:00
Dave Shepherd f6770be254
Add AWS Cognito secrets engine to community section of the plugins website page (#11966) 2021-07-16 13:22:33 -07:00
Mike Green 20b84c4deb
Docs: Add link to more sentinel examples (#11931) 2021-07-16 16:20:41 -04:00
Josh Black 9052ed6466
Document bolt metrics (#12107) 2021-07-16 11:44:30 -07:00
Tom Proctor 47457b1298
Add ServiceNow credential resolver docs (#11996) 
* Add ServiceNow credential resolver docs

* Add information about using system CAs

* Add field mappings and troubleshooting tips
 2021-07-16 10:53:14 +01:00
Danny Hermes 16c3c4902a
Typo fix: period rotation -> periodic rotation (in transit docs) (#12030) 2021-07-15 08:18:09 -04:00
John-Michael Faircloth 07e00882b8
[docs] secrets/identity - grammar and punctuation fixes (#12065) 
* some grammar and punctuation fixes

* remove unneeded char
 2021-07-14 14:35:10 -05:00
Mike Green 217f69f8d2
docs/stepdown-clarification (#12077) 2021-07-14 15:10:07 -04:00
Loann Le 59bf7b9b09
removed sentence from intro (#12076) 2021-07-14 10:08:04 -07:00
Jason O'Donnell 8bc9790bf4
docs: fix formatting in azure secrets overview (#12058) 2021-07-13 14:55:53 -04:00
Yong Wen Chua 7ea650bc06
Update Documentation for GCP Static Account (#12027) 
* Update API Docs for Static Account

* Update CHANGELOGs

* Update guide

* Clarify IAM

* More refinement

* Fix missing replace of roleset while copy/pasting

Co-authored-by: Austin Gebauer <34121980+austingebauer@users.noreply.github.com>

* Remove CHANGELOG

* Fix some double ticks

* Apply suggestions from code review

Co-authored-by: Austin Gebauer <34121980+austingebauer@users.noreply.github.com>

* Update examples

Co-authored-by: Austin Gebauer <34121980+austingebauer@users.noreply.github.com>
 2021-07-13 09:36:05 -07:00
Meggie 02d5ce7374
Add replication example to upgrade docs (#12040) 2021-07-12 13:13:45 -04:00
Thor db9edf519b
cockroachdb: Fix either incorrect or outdated info (#11512) 
The documentation stated that Vault would not create the table
if it doesn't exist. But Vault does attempt to create the table if
it doesn't exist.

Ref:
https://github.com/hashicorp/vault/blob/master/physical/cockroachdb/cockroachdb.go#L84
 2021-07-09 14:30:21 -07:00
Pratyoy Mukhopadhyay 9b5e89bd34
[VAULT-2776] Add prefix_filter option to Vault (#12025) 
* [VAULT-2776] Add prefix_filter support to vault

* [VAULT-2776] Add filter_default config, update docs

* [VAULT-2776] Add changelog file

* [VAULT-2776] Update telemetry tests and error handling

* [VAULT-2776] Add test fixtures, update test

* [VAULT-2776] Update gitignore hcl filter
 2021-07-09 14:49:53 -05:00
Loann Le 43265d6626
changed name from faqs to faq (#12033) 2021-07-09 09:13:49 -07:00
Danny Hermes a4bb9baf48
Typo fix: period rotation -> periodic rotation (#12011) 2021-07-08 10:45:49 -04:00
Jason O'Donnell 0bc339a2f8
docs: add SSL connection example to oracle (#12006) 
* docs: add SSL connection example to oracle

* Fix link

* Add quotes to path
 2021-07-07 12:47:49 -04:00
Jason O'Donnell 5a3bf9b506
docs: fix link rendering for Oracle (#11994) 
* docs: fix link rendering for Oracle

* Fix render
 2021-07-06 13:25:36 -04:00
Mike Green 7878db7c2c
Add link to newish learn upgrade guide (#11748) 2021-07-01 08:12:57 -07:00
Pratyoy Mukhopadhyay c7e6a07939
Augment lease revocation metrics (#11954) 
* [VAULT-1982] Add metric for irrevocable leases

* [VAULT-1982] Add metric for tracking worker count per queue

* [VAULT-1982] Update external docs

* [VAULT-1982] Add nil check on metrics sink

* [VAULT-1982] Update metric name, fix access patterns

* [VAULT-1982] Add locking when marking leases as irrevocable

* [VAULT-1982] Remove workers per mount metric

* [vault-1982] Misc review fixes

* [VAULT-1982] minor refactor

* [VAULT-1982] Add/update some comments
 2021-06-30 14:37:36 -07:00
Nick Cabatoff 7ad3f74e07
Add overlooked 1.7 agent cache eventual consistency options. (#11964) 2021-06-29 15:36:10 -04:00
Austin Gebauer b34e24fa64
docs: AWS KMS updates for key management secrets engine (#11958) 2021-06-29 10:31:25 -07:00
Jason O'Donnell b2c9b3c344
plugins/ad: Add rotate-role endpoint (#11942) 
* plugins/ad: add rotate-role

* Add doc

* changelog

* Add note about rotate-role in overview
 2021-06-25 14:00:03 -04:00
Theron Voran 5c5a57626e
docs: vault-helm add license update steps (#11911) 
Co-authored-by: Tom Proctor <tomhjp@users.noreply.github.com>
 2021-06-25 08:49:48 -07:00