Commit graph

3576 commits

Author SHA1 Message Date
Nick Cabatoff 1b789f5ae5
Note that all local mounts are impacted, including on primary. (#10807) 2021-02-16 10:37:37 -05:00
Rosemary Wang a48db957ca
docs: Update Azure AD OIDC documentation (#10853)
Addresses #8191 with clearer external groups configuration.
2021-02-12 17:28:00 -08:00
Mark Gritter a8d2e6e350
Added a table showing the entity alias name used by each auth method. (#10908)
* Also corrected the text about token auth method.
2021-02-11 18:34:45 -06:00
Zachary Shilton e45d81ff47
Use revised BeforeAfterDiagram, VerticalTextBlockList (#10907)
* Switch BeforeAfterDiagram implementation, pulled from www-next

* Bump vertical-text-block-list, update md to HTML

* Bump to latest case-study-slider
2021-02-11 16:29:38 -05:00
aphorise 17003328ab
Docs - Namespace monitoring corrected examples (#10863)
Re-doing PR #10305
2021-02-11 11:32:52 -06:00
Tom Proctor 5f9891f992
auth/kubernetes docs: Correct default issuer (#10900)
As per 207d1b4c1c/path_login.go (L24), the default issuer when none is set is `kubernetes/serviceaccount`.
2021-02-11 15:26:34 +00:00
Vishal Nayak 53cb1deb38
Revert "Read-replica instead of non-voter (#10875)" (#10890)
This reverts commit fc745670cf34821f5834357d9caebc3351dbc1e7.
2021-02-10 16:41:58 -05:00
Vishal Nayak a2394e7353
Read-replica instead of non-voter (#10875) 2021-02-10 09:58:18 -05:00
Jim 7cb100e9a7
Update kubernetes.mdx (#10871)
Add suggestion to validate K8S cluster address and TCP port using cluster-info command and update sample config (line 77) to prompt for validation. Feedback from prospect was that doc is misleading since our sample uses TCP 8443.
2021-02-09 14:50:31 -05:00
jonZlotnik 541079dec3
both serviceaccount and namespace can be splat (#10829)
Needs to be changed in the docs.
Please see commit 70bc47384bedfc895d08d1df17a45b0c4ea8b6de
2021-02-09 11:14:13 -08:00
Scott Miller ad1621dd5f
Add documentation about the horizontal cluster scalability of PKI secret engine operations (#10745)
* Add documentation about the horizontal cluster scalability of PKI secret engine operations

* Mention generate_lease

* cluster terminology

* Discuss generate_lease

* active again

* One more go
2021-02-09 11:00:24 -06:00
Bryce Kalow 1e7b38fc75
website: upgrade nextjs-scripts & next (#10831) 2021-02-09 10:54:58 -05:00
Michael Golowka aaa51e975f
Add docs for OpenLDAP dynamic secrets (#10817) 2021-02-05 10:49:29 -07:00
Calvin Leung Huang b1c4b86d7f
approle: add ttl to the secret ID generation response (#10826)
* approle: add ttl to the secret ID generation response

* approle: move TTL derivation into helper func

* changelog: add changelog entry

* docs: update approle docs and api-docs pages
2021-02-03 16:32:16 -08:00
Jason O'Donnell 84cb949802
k8s doc: update for 0.9.1 and 0.8.0 releases (#10825)
* k8s doc: update for 0.9.1 and 0.8.0 releases

* Update website/content/docs/platform/k8s/helm/configuration.mdx

Co-authored-by: Theron Voran <tvoran@users.noreply.github.com>

Co-authored-by: Theron Voran <tvoran@users.noreply.github.com>
2021-02-02 16:37:34 -05:00
Brandon Romano 4a6e00081c
Web Updates for HCP (2/2) (#10820)
* Web Updates for HCP (2/2)

Adds HCP Vault section to homepage

Updates the Nav

Hack in a third 'try cloud' link

Update banner to point to HCP site

* website: utm params for all hcp links

Co-authored-by: Kyle MacDonald <kmacdonald@hashicorp.com>
2021-02-02 11:41:19 -05:00
Bryce Kalow 1205d23e53
add table styles to the style.css (#10793) 2021-02-01 23:24:04 -05:00
Josh Black 449b9ddedb
Clarify docs around using the Vault Agent as a windows service (#10519) 2021-02-01 10:03:42 -08:00
Mark Gritter 3ec15c4927
Fix use of identity/group endpoint to edit group by name (#10812)
* Updates identity/group to allow updating a group by name (#10223)
* Now that lookup by name is outside handleGroupUpdateCommon, do not
use the second name lookup as the object to update.
* Added changelog.

Co-authored-by: dr-db <25711615+dr-db@users.noreply.github.com>
2021-01-29 16:50:08 -06:00
Mike Green 588ce498d3
clarify space limits in bytes (#10811) 2021-01-29 14:43:48 -05:00
Meggie 06e5ec9b53
Updating website to 1.6.2 (#10810) 2021-01-29 13:47:54 -05:00
Nick Cabatoff 936ce3ba62
Document identity behaviour on local auth mounts. (#10805) 2021-01-28 11:45:53 -05:00
Hridoy Roy 17e20bdaa6
docs change for max request size community PR (#10723) 2021-01-27 10:02:00 -08:00
Hridoy Roy 537189cab8
make token create case insensitive [VAULT-1021] (#10743)
* make token create case insensitive

* changelog

* comment update
2021-01-27 09:56:54 -08:00
Hridoy Roy d1241b5286
changelog for entropy augmentation PR [VAULT-1179] (#10755)
* changelog for entropy augmentation

* docs upgrade

* docs upgrade

* docs upgrade

* docs upgrade
2021-01-26 21:06:38 -08:00
Aleksandr Bezobchuk 46c3f1f7bc
docs: update "Policy Syntax" section (#10590)
Co-authored-by: mgritter <mgritter@hashicorp.com>
2021-01-26 22:14:47 -06:00
Aleksandr Bezobchuk 2ec8f9a222
metrics: activity log (#10514)
* core: add vault.identity.entity.active.monthly log
* Fixed end-of-month metrics and unit test.
* Added metric covering month-to-date (not broken down by namespace.)
* Updated documentation
* Added changelog.

Co-authored-by: mgritter <mgritter@hashicorp.com>
2021-01-26 16:37:07 -06:00
Jeff Escalante 3cf16ac1f6
point edit page link to master (#10778) 2021-01-26 16:50:58 -05:00
Jim Kalafut fb049caa7f
Clarify agent lease renewal docs (#10772) 2021-01-26 12:07:59 -08:00
John Eikenberry 1ecd3464eb
fix deep links to consul-template docs (#10768) 2021-01-25 16:42:19 -08:00
Jeff Escalante c0c0dd5379
remove netlify config (#10711) 2021-01-22 15:16:25 -05:00
Mike Green b0d5660765
Clarify slash is needed on gcs and azure (#10710)
Clarify user question, unexpected behavior with no slash on gcs.
2021-01-21 12:32:24 -05:00
Lauren Voswinkel 086e8bbb74
Updates api-docs for static role deletion (#10736)
We now specify that the user will remain unless cleaned up manually
2021-01-20 12:57:00 -08:00
Nick Cabatoff b93c5ff304
Spell out how to configure credentials for GCS. (#10589) 2021-01-20 09:09:23 -05:00
Jeff Escalante 5e60bd9677
add vercel config (#10707) 2021-01-15 15:44:28 -05:00
Jeff Escalante f48841c6ea
Docs: prepare for vercel hosting move (#10598)
* prepare for move to vercel hosting

* update readme

* add back netlify files for hosting transition
2021-01-15 15:29:22 -05:00
Mike Wickett b4d0403ef1
website: update alert banner for HCP Vault public beta (#10699) 2021-01-14 14:03:41 -05:00
Brandon Romano 339b8d62c2
Website StackMenu updates for 1/14 (#10690) 2021-01-14 09:19:09 -08:00
Lauren Voswinkel 1ec64fd010
Update Snowflake docs (#10691)
* Update Snowflake docs

Snowflake docs had an issue, `DEFAULT ROLE` should be `DEFAULT_ROLE`

* Update docs to show an actual username
2021-01-13 14:59:16 -08:00
Eugene R 331529fc94
Aerospike storage backend (#10131)
* add an Aerospike storage backend

* go mod vendor

* add Aerospike storage configuration docs

* review fixes

* bump aerospike client to v3.1.1

* rename the defaultHostname variable

* relocate the docs page
2021-01-12 15:26:07 -08:00
Mike Wickett d72c4d5235
website: add alert banner to promote webinar (#10683) 2021-01-11 11:17:03 -05:00
Scott Miller 77d27cb968
Add NIST guidance on rotating keys used for AES-GCM encryption (#10612)
* Add NIST guidance on rotating keys used for AES-GCM encryption

* Capture more places barrier encryption is used

* spacing issue

* Probabilistically track an estimated encryption count by key term

* Un-reorder imports

* wip

* get rid of sampling
2021-01-07 15:37:37 -06:00
Theron Voran c788e98a16
Adding documentation for multiple vault-k8s replicas (#10659)
Describes the setup and config for using multiple injector replicas
with auto and manual TLS.

Co-authored-by: Tom Proctor <tomhjp@users.noreply.github.com>
2021-01-07 12:22:21 -08:00
Zachary Shilton 6ed50b5df9
Move code highlighting to build time (#10614)
* Bump react-scripts to v14
* Pull in latest dependencies
* Replace text-and-content on home page
* WIP replace text-and-content on use case pages
* Finish removing text-and-content from use-case pages
* Remove text-and-content completely
* Add logo-grid dep, fix style import
* Remove unneeded indirect deps
2021-01-07 14:40:35 -05:00
Mark Gritter d076d95d37
Feature flags API (#10613)
* Added sys/internal/ui/feature-flags endpoint.
* Added documentation for new API endpoint.
* Added integration test.
Co-authored-by: swayne275 <swayne@hashicorp.com>
2021-01-06 16:05:00 -06:00
Jim Kalafut 9064097c5d
Make example Okta creds more obviously fake (#10639) 2021-01-06 10:05:23 -08:00
Lauren Voswinkel ce90acd68d
Add Snowflake docs to the website (#10617)
* Add snowflake docs to the website

* Update navs

* Add Snowflake to the DB Capabilities table
2021-01-05 14:44:28 -08:00
Jason O'Donnell abfb92173c
docs: update Vault Helm to 0.9.0 (#10656)
* docs: update vault-helm for 0.9.0

* Fix typo in leaderElector config

* Add default value to ttl

* Update website/content/docs/platform/k8s/helm/configuration.mdx

Co-authored-by: Theron Voran <tvoran@users.noreply.github.com>

* Update website/content/docs/platform/k8s/helm/configuration.mdx

Co-authored-by: Theron Voran <tvoran@users.noreply.github.com>

* Update website/content/docs/platform/k8s/helm/configuration.mdx

Co-authored-by: Theron Voran <tvoran@users.noreply.github.com>

* Add affinity default for injector

* Update website/content/docs/platform/k8s/helm/configuration.mdx

Co-authored-by: Theron Voran <tvoran@users.noreply.github.com>

Co-authored-by: Theron Voran <tvoran@users.noreply.github.com>
2021-01-05 16:46:20 -05:00
Nick Cabatoff 5c446d9d53
Clarify which seal/recovery config we mean. (#10634) 2021-01-04 10:31:36 -05:00
Nick Cabatoff 69e68c4d0d
Document constraints re primary vs secondary clusters. (#10527) 2021-01-04 08:35:17 -05:00
Jeff Escalante ec620a7765
Implement MDX Remote (#10581)
* implement mdx remote

* fix an unfenced code block

* fix partials path

Co-authored-by: Jim Kalafut <jkalafut@hashicorp.com>
2020-12-17 16:53:33 -05:00
Meggie 210618d2b9
Updating version to 1.6.1 (#10566)
Will merge this after the release is done.
2020-12-17 12:52:03 -05:00
Alex Cahn a605f9ddd6
Update to add the newly released Couchbase DB SE (#10580)
* Update to add the newly released Couchbase DB SE

* Update website/pages/docs/plugin-portal/index.mdx

Co-authored-by: Calvin Leung Huang <cleung2010@gmail.com>

Co-authored-by: Calvin Leung Huang <cleung2010@gmail.com>
2020-12-15 16:55:38 -08:00
Ronen Botzer c602f9999f
A Database Secrets Engine plugin for Aerospike (#10522)
* A Database Secrets Engine plugin for Aerospike

* Order the subsections consistently
2020-12-15 15:13:56 -08:00
Michel Vocks 191aa65bc3
Fix UI custom header values (#10511)
* Fix UI custom header values

* Fix changelog entry

* Introduce param for multi values

* Fix multivalue

* multivalue should be bool

* Sort imports

* Fix conflict

* Remove changelog entry

* Revert entry delete
2020-12-15 15:58:03 +01:00
Tomas Gustavsson fc9fa540af
Add PrimeKey EJBCA as partner secrets plugin (#10531)
* Add PrimeKey EJBCA as partner secrets plugin

* Update website/pages/docs/plugin-portal/index.mdx

* Update website/pages/docs/plugin-portal/index.mdx

Co-authored-by: Calvin Leung Huang <cleung2010@gmail.com>
2020-12-14 17:37:09 -08:00
acahn b969a23f84
Update index.mdx (#10574)
Modernizing the Partner language as part of the evolution of the partner program.
2020-12-14 17:08:44 -08:00
Kyle MacDonald acd0cd037c
website: redirect raft snapshot url to automated storage snapshots (#10553) 2020-12-14 12:48:58 -05:00
Nick Cabatoff 6c5183abda
Fix link to autosnap api docs. (#10521) 2020-12-09 16:19:15 -05:00
danielehc 98f516aa58
Add details on Consul token ttl (#10470)
* Add details on Consul token ttl

* Update website/pages/docs/secrets/consul/index.mdx

Co-authored-by: Kent 'picat' Gruber <kent@hashicorp.com>

Co-authored-by: Kent 'picat' Gruber <kent@hashicorp.com>
Co-authored-by: Vishal Nayak <vishalnayak@users.noreply.github.com>
2020-12-09 08:20:21 -05:00
Kyle Rarey 6fec9f68e3
Correct key length in Transit storage limits (#10422)
The AES256-GCM96 key was mis-labeled as AES128 under Transit storage limits. Corrected the table.

Co-authored-by: Mark Gritter <mgritter@hashicorp.com>
2020-12-07 11:43:24 -06:00
Mike Wickett 6a6f1d67c8
website: fix broken link to api docs (#10501) 2020-12-04 11:55:20 -08:00
Jason O'Donnell 8d8b7f287f
docs: fix auth/k8s broken link (#10495) 2020-12-03 16:24:37 -05:00
Brian Kassouf 264f12e72a
Telemetry consul transaction (#10486)
* Update consul.go

* Update telemetry.mdx
2020-12-03 11:19:08 -08:00
Jaskanwal Pawar 8a5a456fdb
Fix typo about environment variable in docs (#10259)
The CLI appears to read from `VAULT_CACERT` instead of `VAULT_CA_CERT` as the docs currently say. Basing this off code [here](a8566c4f89/api/client.go (L30)) and personal observation
2020-12-02 16:09:00 -07:00
Mike Green f6138a98d1
clarify secret revoke during mount disable (#10483) 2020-12-02 12:55:47 -05:00
Austin Gebauer a50cf45b23
corrects a typo in the azure secrets docs (#10455) 2020-11-25 12:26:04 -08:00
Mark Gritter 123b30631d
Added documentation for vault operator usage. (#10432)
Co-authored-by: swayne275 <swayne@hashicorp.com>
2020-11-23 20:10:48 -06:00
Josh Black b8ba047b35
Allow Vault Agent to run as a Windows service (#10231) 2020-11-23 14:24:32 -08:00
Hridoy Roy 9030ec32ef
Telemetry documentation: Lease Expiry Metrics (#10377)
* telemetry doc update

* upgraded telemetry configuration docs

* review comments update
2020-11-23 11:06:41 -08:00
Nick Cabatoff dad10ddabc
Avoid using "KMS seal" since it causes confusion: some people think that excludes HSMs, and it's not obvious that Transit is a KMS. (#10414)
Highlight that recovery keys can't be used for recovery when an auto seal is broken (unfortunate name, that.)
2020-11-23 08:59:25 -05:00
Meggie 87df286a24
Update to list policy & some raft docs (#10396)
* Update to list policy docs

It seems
(https://github.com/hashicorp/vault/blob/master/http/logical.go#L137) we
do not require the trailing slash any more.
Also added notes about go-discover

* Added additional note on quorum

* Added link to remove-peer command
2020-11-20 17:14:28 -05:00
Roger Berlind f5973c6dad
Change API token to ACL token (#10425) 2020-11-20 11:07:27 -08:00
Dave D'Amico 9ece4acead
remove space which caused formatting weirdness (#10415) 2020-11-18 11:08:06 -08:00
Yoko d926031159
Add Learn links (#10411)
* Add Learn links

* Update website/pages/docs/secrets/transform/tokenization.mdx

Co-authored-by: Calvin Leung Huang <cleung2010@gmail.com>

Co-authored-by: Calvin Leung Huang <cleung2010@gmail.com>
2020-11-17 16:56:30 -08:00
Michael Golowka 69bbecea78
Clarify JWT in kubernetes auth docs (#10403) 2020-11-16 16:45:12 -07:00
Yoko 492ed5b319
Update 'sane' default to say 'reasonable' default (#10400) 2020-11-16 14:19:18 -08:00
Michael Golowka 2cbd4a9e00
Add note about Database engine interface (#10372) 2020-11-13 10:44:21 -07:00
Scott Miller ddcb15cef9
Link to transform concepts page in sidebar. (#10392)
* Link to transform concepts page in sidebar

* ,
2020-11-12 18:04:51 -06:00
Jim Kalafut 17fea5cea9
Add automated raft snapshots to sidebar (#10387) 2020-11-12 08:53:23 -08:00
Meggie d511cef5df
Added upgrade note about go version (#10385) 2020-11-11 18:26:11 -05:00
Scott Miller d17917341c
Transform doc fix (#10383)
* Add tokenization

* Fixes
2020-11-11 12:54:11 -06:00
Jim Kalafut 3cdad923f4
Add 1.6 Release Notes (#10378)
* Add 1.6 Release Notes

* Remove usage command

* Apply suggestions from code review

* Website version + CHANGELOG

Co-authored-by: Meggie <meggie@hashicorp.com>
2020-11-11 10:36:23 -05:00
Scott Miller 2db96ae7ac
Add upgrade note for Transform (#10371)
* Add upgrade note for tokenization

* nav

* Just 1.5

* Clarify relationship to API changes

Co-authored-by: Meggie <meggie@hashicorp.com>
2020-11-11 10:33:51 -05:00
Austin Gebauer c62582e0de
docs: adds documentation for key management secrets engine (#10353)
Co-authored-by: Clint <catsby@users.noreply.github.com>
Co-authored-by: Yoko <yoko@hashicorp.com>
2020-11-10 09:28:28 -08:00
Dave D'Amico 1b2a198212
More info on when vm params are not needed (#10362)
* more info on when vm params are not needed

* more updates
2020-11-09 11:49:03 -08:00
Jim Kalafut dae4bc5fbc
Update azure.mdx (#10347) 2020-11-09 11:20:06 -08:00
Scott Miller b6b3ec79ca
Land Tokenization docs (#10357) 2020-11-09 10:58:54 -06:00
Josh Black a361d1299b
Add plugin reload docs to the website sidebar (#10108) 2020-11-06 14:13:12 -08:00
Nick Cabatoff 48103c71fe
Add autosnapshot docs. (#10338) 2020-11-06 15:56:52 -05:00
Tom Proctor 61c5da6911
Update MongoDB Atlas plugin docs (#10343)
Root credential rotation not supported as the Vault user uses public/private keys instead of passwords to authenticate.
2020-11-06 19:16:48 +00:00
Brian Kassouf caf65bfae7 Add new metrics to the telemetry page 2020-11-05 15:05:07 -08:00
Georges Jamous fba851dbe9
Update raft.mdx (#10329) 2020-11-05 12:33:50 -08:00
aphorise e5a6ef2df2
Elipse / triple dots missing in VAULT_TOKEN (#9929) 2020-11-05 09:54:26 -08:00
Jimmy Merritello c087f5885b
Bump HSM version (#10327) 2020-11-05 12:53:25 -05:00
Mark Gritter f742277996
Documentation for client count / activity log API. (#10315)
* Documentation for client count API.
* New concepts page
Co-authored-by: swayne275 <swayne@hashicorp.com>
2020-11-05 11:47:48 -06:00
Meggie 10a16574a6
Proposed changelog for the 1.6.0 RC (#10328)
* changelog++

I wasn't entirely sure what the changelog should look like for the release candidate.

* Updating website version
2020-11-04 18:23:15 -05:00
Austin Gebauer e32e1e17c7
docs: clarify location of service account key file for google-specific OIDC handling (#10313) 2020-11-02 17:45:05 -08:00
Brian Kassouf 8af08c3221
Add an env var to enable a permit pool that limits lease expirations (#10268)
* Add a flag to enable a permit pool to gate lease expiration

* Use the env var to get the size

* Add logs and metris to help debug this

Co-authored-by: Hridoy Roy <roy@hashicorp.com>
2020-10-30 14:45:44 -07:00
Theron Voran 16eb1489d1
Update OIDC namespace_in_state docs (#10269)
To reflect the default of true for new configs.
2020-10-30 08:15:34 -07:00
Brian Kassouf 81a86f48e8
Backport some OSS changes (#10267)
* Backport some OSS changes

* go mod vendor
2020-10-29 16:47:34 -07:00
aphorise f172eb9477
Docs - examples of IPv6 added in listener section of configurations. (#9601) 2020-10-29 15:12:18 -04:00
akosuadenell ab5b8bc6bf
Update index.mdx (#10262) 2020-10-29 12:04:48 -07:00
Hridoy Roy f8a248ce48
Port: change leader status metric name to active (#10245)
* change active node metric name

* comment to see if commit is fine

Co-authored-by: Hridoy Roy <hridoyroy@Hridoys-MacBook-Pro.local>
2020-10-29 10:30:45 -07:00
Jonas-Taha El Sesiy b7cf4a05ff
Add support for Managed Identity auth for physical/Azure (#10189)
* Add support for Managed Identity auth for physical/Azure

Obtain OAuth token from IMDS to allow for access to Azure Blob with
short-lived dynamic credentials

Fix #7322

* add tests & update docs/dependencies
2020-10-28 15:04:26 -07:00
Jason O'Donnell a4bcbb84e2
docs: fix k8s helm configuration rendering (#10257) 2020-10-28 10:51:40 -04:00
Hridoy Roy 0259be04e0
Port: Add metrics to report mount table sizes for auth and logical [Vault 671] (#10201)
* first commit

* update

* removed some ent features from backport

* final refactor

* backport patch

Co-authored-by: Hridoy Roy <hridoyroy@Hridoys-MacBook-Pro.local>
Co-authored-by: Hridoy Roy <hridoyroy@Hridoys-MBP.hitronhub.home>
2020-10-27 08:24:43 -07:00
Tom Proctor e6807a0645
Docs: Support for scopes in MongoDB Atlas database plugin (#10241) 2020-10-27 13:24:51 +00:00
Jason Witkowski ebfaa551eb
Add ability to specify region for OCI Storage Backend (#9302)
* Add ability to specify region for OCI Storage Backend

* Fix capitalization in Vault documentation

Co-authored-by: Josh Black <raskchanky@users.noreply.github.com>
Co-authored-by: Vishal Nayak <vishalnayak@users.noreply.github.com>
2020-10-26 18:28:32 -04:00
Theron Voran d8dc45f03f
UI/OIDC: allow passing namespace in state (#10171)
* UI/OIDC: allow passing namespace in state

Suppport in the UI OIDC callback flow to parse namespace out of the
state parameter instead of a separate query parameter in the
redirect_uri. Includes docs for the option that enables this behavior
in the JWT plugin.

* 1.6 wordsmithing

* pass_namespace_in_state -> namespace_in_state

* re-wording

* use strict equals

Co-authored-by: Vishal Nayak <vishalnayak@users.noreply.github.com>
2020-10-26 18:17:21 -04:00
Michael Golowka e07fe992ef
DBPW - Add readme to dbplugin package (#10230) 2020-10-26 13:57:02 -06:00
Theron Voran b705d71ae7
Add info about aws timeouts to docs (#10209)
In auth/aws, seal/awskms, and secrets/aws, storage/s3, and
storage/dynamodb.

One blurb for the docs pages and one for the .0 upgrade pages.
2020-10-26 11:15:59 -07:00
Aleksandr Bezobchuk 95bbd8d920
Merge PR #10192: Auto-Join: Configurable Scheme & Port (and add k8s provider) 2020-10-23 16:13:09 -04:00
Ryan Treat d5169bae28
Update Venafi Secrets Engine doc to account for recent enhancements (#10221) 2020-10-22 16:25:37 -07:00
Meggie ecaa561262
Updating latest version to 1.5.5 on website (#10208) 2020-10-21 19:27:43 -04:00
Jason O'Donnell cdcbac013b
docs: update helm to 0.8.0 (#10190)
* docs: update helm to 0.8.0

* Fix formatting

* Add allowed values to failurePolicy
2020-10-20 15:47:47 -04:00
Jason O'Donnell 2dbd6dd098
Update injector docs for 0.6.0 (#10186) 2020-10-20 13:09:37 -04:00
Mike Green 77ea265a0a
Clarify prometheus_retention_time to 0 (#10187)
zero prometheus_retention_time will disable.
2020-10-20 11:51:08 -04:00
Michael Golowka ec29078acb
DBPW - Update docs with password policies & new Database interface (#10138) 2020-10-19 15:58:09 -06:00
Jeff Escalante ee6dafcf45
fix press kit (#10169) 2020-10-18 22:07:58 -07:00
Julien Rottenberg 6c6dc2bfbb
Fix for broken link (#10152) 2020-10-16 16:44:33 -07:00
davidadeleon ab18a74c08
Updated missing code encoding around two path references (#10161) 2020-10-16 16:26:28 -07:00
Aleksandr Bezobchuk 0d6a0ec589
Merge PR #10010: Rate Limit Quotas: Allow Exempt Paths to be Configurable 2020-10-16 14:58:19 -04:00
Jimmy Merritello 767c3cd29f
Update HSM version w/ waypoint (#10154) 2020-10-15 12:55:20 -04:00
Peter Souter feaafb2c3a
Adds note that it requires a PEM-encoded file (#10145) 2020-10-14 16:43:07 -07:00
Jimmy Merritello 4d9a2c44ca
[Website] Bump HSM version (#10149)
* Bump HSM version

* Updated pkg
2020-10-14 14:32:48 -04:00
Jim Kalafut a23ed17806
Add GCS storage change to 1.5.0 upgrade guide (#10139) 2020-10-14 07:34:47 -07:00
Hridoy Roy 771da35261
upgrade docs for new telemetry [VAULT-672] (#10137)
* upgrade docs for new telemetry

* Update telemetry.mdx

Co-authored-by: HridoyRoy <hridoyroy@Hridoys-MacBook-Pro.local>
2020-10-14 06:52:23 -07:00
Connor 8b1a3301f0
Add telemetry for LRU cache (#10079)
Vault creates an LRU cache that is used when interacting with the
physical backend. Add telemetry when the cache is hit, missed, written
to and deleted from. Use the MetricSink from ClusterMetrics
2020-10-13 10:11:54 -05:00
Calvin Leung Huang 95c5f60055
docs/ssh: update algorithm_signer param after #9824 (#10126) 2020-10-09 15:42:11 -07:00
Jimmy Merritello ec133d98a2
Add new HashiStackMenu (#10105) 2020-10-09 12:15:38 -04:00
James Connor 86e79f6f26
lease_renewable false on STS AWS credentials (#10115)
See #1804
2020-10-08 10:25:01 -07:00
Peter Souter c48ec9cfc3
Adding note about commands that are root only (#10098)
* We don’t specifically note anywhere that these 
have to be run from root, so makes sense to add
2020-10-08 09:46:43 -07:00
Martin Baillie 09aa3dfa6c
Add reference to community GitHub secrets plugin (#10111) 2020-10-08 09:45:42 -07:00
Josh Black 088c6c7364
Add API docs for sys/monitor (#9968) 2020-10-07 11:53:07 -07:00
Josh Black 3e278b33dc
Clarify docs around audit non-hmac request and response keys (#10018) 2020-10-06 10:43:32 -07:00
Michel Vocks dc5a0da770
Pull latest raft updates (#10055)
* Implement raft peers metric

* Remove old peers metric

* Update vault raft dependency

* Add peer_id docs
2020-10-05 16:36:48 +02:00
Meggie da82b2096d
Adding an UG note on primary_cluster_addr behavior (#10071) 2020-10-02 13:25:09 -04:00
Troy Fluegge 2b9b41115a
Update index.mdx (#10064)
Reworded disable_mlock to remove confusion regarding what is acceptable for production deployments.  Disabling mlock is alright for production given the additional security recommendations are implemented.  Disabling mlock is also recommended for integrated storage
2020-10-01 15:31:03 -07:00
Aleksandr Bezobchuk a3cfa7c447
Merge PR #10059: Port OSS changes from #1497 2020-10-01 15:15:20 -04:00
Andy Assareh ab7cd4f8db
corrected typo in "certificate" (#9916) 2020-09-28 17:39:01 -07:00
Andy Assareh 818120b401
corrected a missing noun (#9917) 2020-09-28 17:38:39 -07:00
Wacław Schiller 5d419f73c3
Minor fix to audit documentation (#10047) 2020-09-28 16:04:45 -07:00
Theron Voran 2ba19c3f16
Update k8s auth docs for new parameter (#9992)
Adds info about the disable_local_ca_jwt parameter.

Co-authored-by: Clint <catsby@users.noreply.github.com>
2020-09-25 11:17:28 -07:00
Meggie 44b255ab61
Updating version for website to 1.5.4 (#10040) 2020-09-25 13:50:09 -04:00
Hridoy Roy a20fe5c066
moved the documentation to kv2 page (#10017)
Co-authored-by: HridoyRoy <hridoyroy@Hridoys-MacBook-Pro.local>
2020-09-22 11:58:00 -07:00
Lauren Voswinkel 15e608c0ed
Update AD secret engine docs for root cred rotation (#9990) 2020-09-21 16:21:14 -07:00
Meggie 9190860cc0
docs: Change sidebar labeling to use Integrated Storage (#10002)
I changed some verbiage in the page as well.
2020-09-21 15:55:36 -04:00
Mike Green 9eb1fb1df4
minor only ha_storage clarification (#10001) 2020-09-21 13:06:03 -04:00
Sebin John 9b3e244e40
Fix doc formatting. (#9994) 2020-09-21 10:01:43 -07:00