* Add NIST guidance on rotating keys used for AES-GCM encryption
* Capture more places barrier encryption is used
* spacing issue
* Probabilistically track an estimated encryption count by key term
* Un-reorder imports
* wip
* get rid of sampling
Describes the setup and config for using multiple injector replicas
with auto and manual TLS.
Co-authored-by: Tom Proctor <tomhjp@users.noreply.github.com>
* Redirect to url with namespace param if user logged into root namespace without permission
* Feature flag service for managing flags
* Redirect with namespace query param if no current namespace param AND managed root namespace set
* Test coverage for managed namespace changes
* Handle null body case on feature-flag response, add pretender route for feature-flags on shamir test
* Make the error response to the sys/internal/ui/mounts with no client token consistent
* changelog
* Don't test against an empty mount path
* One other spot
* Instead, do all token checks first and early out before even looking for the mount
* Adding snowflake as a bundled database secrets plugin
* Add snowflake-database-plugin to expected bundled plugins
* Add snowflake plugin name to the mockBuiltinRegistry
* cannot do full refresh of page, so set the current URL instead of using the toggle
* add comment remove pauseTest
* remove
* check for namespace in toggle
* removing extra information from the returned error, to avoid leaking it to unauthenticated requests
* removing extra information from the returned error, to avoid leaking it to unauthenticated requests
* Changelog entry for #10516
* Change the error message in a way that is retains the HTTP status code
* Change changelog file num
* And right back where we started...
Co-authored-by: bruj0 <ramakandra@gmail.com>
* fix issue with model not reloading on href-to previously tried to fix after upgrade.
* replace with normalizednamepsace and setup for testing
* add the same functionality to the switch namespace link
* meep, wrong branch
* wow it's friday, correct branch
* add changelog for upgrade, didn't do earlier.
* another friday move
* correct change to changelog for ember upgrade
* remove and make another pr
* remove href-to dep and add comment
* setup for concept it works, but probably not the best solution
* add comment and remove console and test var
* use normalize path higher up to fix issu
* add test for bug that fixing
* forgot a couple of changes
* changelog
Test was failing (once we specified the expected error to check) because when we create a token via the TokenStore, without registering the lease in the expiration manager, lookupInternal will see that there is an expiring token with no lease and delete it immediately, yielding the "no parent found" error.
* removing extra information from the returned error, to avoid leaking it to unauthenticated requests
* removing extra information from the returned error, to avoid leaking it to unauthenticated requests
* Change the error message in a way that is retains the HTTP status code
Co-authored-by: bruj0 <ramakandra@gmail.com>
* fix setting enable, update tests
* improve wording
* fix typo - left the testing enabled set in originally
* improve warning handling
* move from nested if to switch - TIL
* Send a test message before committing a new audit device.
Also, lower timeout on connection attempts in socket device.
* added changelog
* go mod vendor (picked up some unrelated changes.)
* Skip audit device check in integration test.
Co-authored-by: swayne275 <swayne@hashicorp.com>
* Update to add the newly released Couchbase DB SE
* Update website/pages/docs/plugin-portal/index.mdx
Co-authored-by: Calvin Leung Huang <cleung2010@gmail.com>
Co-authored-by: Calvin Leung Huang <cleung2010@gmail.com>
* removing extra information from the returned error, to avoid leaking it to unauthenticated requests
* removing extra information from the returned error, to avoid leaking it to unauthenticated requests
Co-authored-by: Scott Miller <smiller@hashicorp.com>
