luxolus/open-vault
2
0
Fork 0
Code Issues 1 Pull requests Releases Activity
12645 commits 1 branch 0 tags 214 MiB
Commit graph

247 commits

Author SHA1 Message Date
Dave D'Amico a60ba90a20
updated 1.3.2 and 1.4.0 upgrade guides to note AWS STS region issue fixed in 1.4.1 (#9137) 2020-06-03 10:27:45 -07:00
Theron Voran 7622bee530
Docs updates for vault-helm 0.6.0 release (#9116) 
* Docs updates for vault-helm 0.6.0 release

* added openshift and postStart values

* noting that openshift support is a beta feature
 2020-06-03 11:44:32 -04:00
Theron Voran fa17e22050
Docs updates for vault-k8s 0.4.0 (#9107) 
* Adding changes for vault-k8s 0.4.0

* add note about run-as-same-user rejecting root
 2020-06-03 10:06:20 -04:00
Brian Kassouf fbd9fd4510
Fix upgrade guide (#9133) 2020-06-02 16:27:19 -07:00
Michael Golowka 5ca4d819d1
Update OpenLDAP Secrets Docs with Password Policies (#9088) 
* Update OpenLDAP docs to use password policies
 2020-06-02 11:34:01 -06:00
Michael Golowka bd587da491
Add docs for password policies (#8974) 
* Add docs for password policies
 2020-06-02 11:12:22 -06:00
Alexander Bezobchuk 9dd67cbeb6
Merge PR #9027: Integrated Storage (Raft): Add Support for max_entry_size Config 2020-06-01 10:17:24 -04:00
dddugan a098e313a9
correct sockaddr.is_contained example (#9104) 
Syntax for sockaddr.is_contained should be outer, inner - i.e. range, IP. See https://docs.hashicorp.com/sentinel/imports/sockaddr/ for reference.
 2020-05-29 10:51:31 -07:00
ncabatoff 9987b71a36
Update seal docs to reflect 1.3 changes. (#9086) 2020-05-29 13:28:03 -04:00
Christophe Drevet-Droguet 932c1834cc
ssh certificate signing: fix documentation of extensions (#8859) 2020-05-29 13:23:19 -04:00
Elthariel 3a07bd0bc4
doc: Add an example of templated policy using k8s metadata (#9101) 2020-05-28 17:54:56 -07:00
ncabatoff d8c52a4b44
Add note regarding LDAP regression. (#9038) 2020-05-27 12:29:30 -04:00
Thomas L. Kula 3ce9615992
Allow auto_auth with templates without specifying a sink (#8812) 
For situations where you want the Vault agent to handle one or more templates but do not require the acquired credentials elsewhere.

Modify the logic in SyncServer so that if there are no sinks, ignore any new credentials. Since SyncServer is responsible for shutting down the agent, make sure it still properly shuts down in this new situation.

Solves #7988
 2020-05-26 13:52:14 -04:00
Jim Kalafut a9d7d34ede
Update release notes (#9064) 2020-05-21 18:51:19 -07:00
Jeff Escalante 8eed94b072
🌷 Docs Website Maintenance (#8985) 
* website maintenance round
* improve docs, revert bug workaround as it was fixed
* boost memory
* remove unnecessary code
 2020-05-21 13:18:17 -04:00
Lauren Voswinkel 8fc08f8c91
Require TLS or plaintext flagging in MySQL configuration (#9012) 
* Adds a safety switch to configuration files.

This requires a user to either use TLS, or acknowledge that they are sending
credentials over plaintext.

* Warn if plaintext credentials will be passed

* Add true/false support to the plaintext transmission ack

* Updated website docs and ensured ToLower is used for true comparison
 2020-05-21 09:09:37 -07:00
Jason O'Donnell 4b2a72c616
doc: clarify token helper intro (#9058) 2020-05-21 10:11:32 -04:00
Jason O'Donnell 1845ef6d2e
doc: add environment variable template example (#9019) 
* doc: add environment variable template example

* Update website/pages/docs/platform/k8s/injector/examples.mdx

Co-authored-by: Becca Petrin <beccapetrin@gmail.com>

Co-authored-by: Becca Petrin <beccapetrin@gmail.com>
 2020-05-18 15:51:17 -04:00
Theron Voran b7a9fb8566
docs: updating helm configuration (#8973) 
Added helm configs that were changed/added in vault-helm
0.5.0. Also corrected the data type of a few config parameters.
 2020-05-18 11:08:40 -07:00
Tyler Reid fbbd4fcf2d
docs: fix agent listener link (#9003) 2020-05-15 06:51:52 -05:00
Scott Miller d1ba50384a
Soften the warning language on PKCS #1 v1.5 padding (#8988) 
* Soften the warning language on PKCS #1 v1.5 padding
 2020-05-14 12:29:21 -05:00
Jim Kalafut 5825b23013
Add 1.4.1 upgrade guide (#8981) 2020-05-13 16:55:32 -07:00
Jason O'Donnell f65cd64696
doc: add notes about injector annotations (#8992) 2020-05-13 16:43:34 -04:00
Clement Chauplannaz c33cd93b93
Typo in policies.mdx (#8850) 2020-05-13 15:17:41 -04:00
ncabatoff 98f32a94a9
Static roles aren't supported yet for atlas. (#8989) 2020-05-13 12:13:29 -04:00
Scott Miller 8805a7b45c
Warn in the documentation against the use of CKM_RSA_PKCS. (#8982) 
* Warn in the documentation against the use of CKM_RSA_PKCS

* tweak

* Roger roger.
 2020-05-12 10:56:41 -05:00
Vishal Nayak 72c4e3c7af
Doc: seal migration update (#8724) 
* Doc: seal migration update

* s/Auto Unseal/KMS Seal

* Update website/pages/docs/concepts/seal.mdx

Co-Authored-By: Meggie <meggie@hashicorp.com>

* Update website/pages/docs/concepts/seal.mdx

Co-Authored-By: Meggie <meggie@hashicorp.com>

* Update website/pages/docs/concepts/seal.mdx

Co-Authored-By: Meggie <meggie@hashicorp.com>

* Update website/pages/docs/concepts/seal.mdx

Co-Authored-By: Meggie <meggie@hashicorp.com>

* Update website/pages/docs/concepts/seal.mdx

Co-Authored-By: Meggie <meggie@hashicorp.com>

* Update website/pages/docs/concepts/seal.mdx

Co-Authored-By: Meggie <meggie@hashicorp.com>

* Update website/pages/docs/concepts/seal.mdx

Co-Authored-By: Meggie <meggie@hashicorp.com>

* s/Recovery/recovery

* remove 'at this point'

* Address review comments

* Address review feedback

* Update website/pages/docs/concepts/seal.mdx

Co-Authored-By: Meggie <meggie@hashicorp.com>

* Update website/pages/docs/concepts/seal.mdx

Co-Authored-By: Meggie <meggie@hashicorp.com>

* Update website/pages/docs/concepts/seal.mdx

Co-Authored-By: Meggie <meggie@hashicorp.com>

* Address review comments

Co-authored-by: Meggie <meggie@hashicorp.com>
 2020-05-12 01:02:59 -04:00
Nicole Forrester 77ad037d9c
Add vault docs redirects & remove deprecated database docs (#8922) 
* website: add redirects for old database docs
* delete deprecated database docs
 2020-05-11 14:20:40 -06:00
Aleksandr Yakimenko 182bfc86f8
Fix minor typos in docs (#8965) 2020-05-11 11:12:48 -04:00
Lauren Voswinkel a1f674c53c
Removing some unnecessary escape characters from Agent docs (#8957) 
* Fix formatting of the Vault Agent docs
 2020-05-09 12:52:13 -07:00
Jim Kalafut 446370d94c
Update Azure Auth docs (#8963) 2020-05-08 16:20:08 -07:00
Jason O'Donnell 656685a253
doc: add note about versions for helm upgrades (#8960) 
* doc: add note about versions for helm upgrades

* Fix repo search output

* Update website/pages/docs/platform/k8s/helm/run.mdx

Co-authored-by: Theron Voran <tvoran@users.noreply.github.com>

Co-authored-by: Theron Voran <tvoran@users.noreply.github.com>
 2020-05-08 16:56:39 -04:00
Theron Voran 564f71a397
Update vault helm docs with new helm repo (#8931) 
* Update the k8s injector docs for the new helm repo

* Update vault helm docs with new helm repo
 2020-05-08 10:55:56 -07:00
Jim Kalafut c922532f2e
Correct docs typos (#8954) 2020-05-08 08:24:38 -07:00
Calvin Leung Huang 49cb9eea09
docs: remove comparison reference in what-is-vault page (#8950) 2020-05-07 15:24:08 -07:00
Lauren Voswinkel 7e9ac9bbec
Fix formatting of the Vault Agent docs (#8947) 
* Fix formatting of the Vault Agent docs

* Fix up the param definitions with <code> rather than <tt>

* Use <code> only where there is a link embedded, otherwise ticks
 2020-05-07 15:10:49 -07:00
Calvin Leung Huang e7af25b969
raft: use file paths for TLS info in the retry_join block (#8894) 
* raft: use file paths for TLS info in the retry_join stanza

* raft: maintain backward compat for existing tls params

* docs: update raft docs with new file-based TLS params

* Update godoc comment, fix docs
 2020-05-06 18:26:08 -07:00
yoyotam 69fa1965de
Update standalone-tls.mdx (#8920) 
extraEnvironmentVars should be under server, not global

Co-authored-by: Theron Voran <tvoran@users.noreply.github.com>
 2020-05-06 17:03:37 -07:00
Michael Golowka 67087f291e
Fix capabilities to show MSSQL static roles aren't supported (#8935) 2020-05-06 10:56:01 -06:00
Vladimir Dimitrov 34f01920e9
Added plugin reload function to api (#8777) 
* Added plugin reload function to api

* Apply suggestions from code review

Co-Authored-By: Calvin Leung Huang <cleung2010@gmail.com>

* go mod vendor

* addressing comments

* addressing comments

* add docs

Co-authored-by: Calvin Leung Huang <cleung2010@gmail.com>
 2020-05-04 11:14:23 -07:00
Michael Golowka d5be4fbd6a
Improve documentation around database plugins (#8892) 
* Adds a summary to the top of each plugin's page showing the capabilities that the plugin has.
* Fixed sidebar sorting (they weren't quite alpabetical)
* Improved instructions for using the Oracle plugin
  * Added note about using the pluggable database rather than the container database
* Replaced admin/root usernames with super-user ones to encourage users to not use the root user in Vault
* Included suggestions to rotate the root user's password when the plugin is capable
* Improve documentation around rotating the root user's password
* Fixed various typos
 2020-05-01 15:05:05 -06:00
grantorchard 4d8c7d3f19
Update index.mdx (#8895) 2020-04-30 09:25:59 -07:00
Becca Petrin 62d266e9b7
Add AWS auth metadata changes to upgrade guide (#8887) 
* add aws auth metadata changes to upgrade guide
 2020-04-29 21:52:03 -07:00
Theron Voran 3c0f80f1dc
Update the vault-helm ingress config docs (#8881) 
The chart defines the `backend` stanza, so the `path` list should
just be path strings. More typos: `tls.hosts` is a list, not a
string.
 2020-04-29 12:10:26 -07:00
Yong Wen Chua f0720205c3
[auth/gcp] Add missing permission to documentation (#8689) 
* [auth/gcp] Add missing permission to documentation

Signed-off-by: Yong Wen Chua <lawliet89@users.noreply.github.com>

* Clarified group aliases
 2020-04-29 09:42:59 -07:00
Jim Kalafut de2d7b5260
Update OIDC configuration docs (#8771) 2020-04-27 15:59:40 -07:00
Michael Hofer 62ee11ef02
Fix typo in Entropy Augmentation docs sales contact link (#8851) 2020-04-26 14:24:48 -07:00
Clement Chauplannaz 5f3a64595b
Typo in response-wrapping.mdx (#8849) 2020-04-26 10:00:32 -07:00
Calvin Leung Huang 2659c34910
raft: check for nil on concrete type in SetupCluster (#8784) 
* raft: check for nil on concrete type in SetupCluster

* raft: move check to its own func

* raft: func cleanup

* raft: disallow disable_clustering = true when raft storage is used

* docs: update disable_clustering to mention new behavior
 2020-04-21 13:45:07 -07:00
Mike Green e58cce958b
Clarify version that sink mode is in (#8764) 
Clarifying customer experience. Ie, don't try this on 1.2.1
 2020-04-17 11:16:21 -07:00
Ryan Canty 49c937ff2c
Added docs for PR in Vault GCP Secrets repo (#8728) 2020-04-16 14:57:50 -07:00
Michael Golowka cfad0ebe16
Clarify key rotation capabilities for Azure auto-unseal (#8745) 
* Clarify key rotation capabilities for Azure auto-unseal

* Fix alignment

Co-authored-by: Vishal Nayak <vishalnayakv@gmail.com>
Co-authored-by: Vishal Nayak <vishalnayak@users.noreply.github.com>
 2020-04-15 12:52:16 -04:00
Becca Petrin 8767f17ef4
Add AWS auth info to upgrade guide (#8731) 
* add aws auth info to upgrade guide

* elaborate on who is effected and add more versions

* use partials for repeated doc text

* add new pages to side nav
 2020-04-13 14:52:10 -07:00
Becca Petrin 8e1ecefe59
minor docs updates (#8725) 2020-04-13 10:03:05 -07:00
Calvin Leung Huang ca34b7b3f1
docs: add section on transformations for the transform engine (#8718) 
* docs: add section on transformations for the transform engine

* docs: emphasize on caveat for internal tweak source
 2020-04-10 17:00:48 -07:00
Melissa Plunkett 774afb0ee6
Update mongodbatlas.mdx (#8720) 
Users copying and pasting the command are running into issues w/ the newlines so squashing example to one line.
 2020-04-09 15:21:09 -07:00
Jeff Escalante fbfed414bd
Routing Fixes (#8703) 
* fix a couple of .html extension links
* remove trailing slash config
* fix redirects, broken links, incorrect anchor link formats
 2020-04-09 13:56:59 -04:00
Calvin Leung Huang e8cc90e8b6
raft: disallow ha_storage stanza when raft storage is used (#8707) 2020-04-08 13:07:42 -07:00
Mike Jarmy 8645089708
document upgrading to 1.4.0 (#8704) 2020-04-08 14:48:46 -04:00
Meggie f75de0ded5
Remove the warning about raft storage being in beta. (#8699) 2020-04-08 12:13:04 -04:00
Brian Kassouf 24056ea929
Update integrated-storage.mdx 2020-04-07 10:14:56 -07:00
Jim Kalafut f08ba0bf55 Transform docs 2020-04-07 10:02:31 -07:00
Jason O'Donnell ffb66ebc83
docs: add vault helm enterprise examples (#8678) 
* docs: add vault helm enterprise examples

* Update website/pages/docs/platform/k8s/helm/examples/enterprise-dr-with-raft.mdx

Co-Authored-By: Theron Voran <tvoran@users.noreply.github.com>

* Update website/pages/docs/platform/k8s/helm/examples/enterprise-dr-with-raft.mdx

Co-Authored-By: Theron Voran <tvoran@users.noreply.github.com>

* Update website/pages/docs/platform/k8s/helm/examples/enterprise-perf-with-raft.mdx

Co-Authored-By: Theron Voran <tvoran@users.noreply.github.com>

* Update website/pages/docs/platform/k8s/helm/examples/enterprise-perf-with-raft.mdx

Co-Authored-By: Theron Voran <tvoran@users.noreply.github.com>

* Update website/pages/docs/platform/k8s/helm/examples/enterprise-with-raft.mdx

Co-Authored-By: Theron Voran <tvoran@users.noreply.github.com>

* Update website/pages/docs/platform/k8s/helm/examples/enterprise-perf-with-raft.mdx

Co-Authored-By: Theron Voran <tvoran@users.noreply.github.com>

* Update website/pages/docs/platform/k8s/helm/examples/enterprise-with-raft.mdx

Co-Authored-By: Theron Voran <tvoran@users.noreply.github.com>

* Update website/pages/docs/platform/k8s/helm/examples/enterprise-dr-with-raft.mdx

Co-Authored-By: Theron Voran <tvoran@users.noreply.github.com>

* Fix website build

* Shorten sidebar titles

* Update website/pages/docs/platform/k8s/helm/examples/enterprise-dr-with-raft.mdx

Co-Authored-By: Theron Voran <tvoran@users.noreply.github.com>

* Update website/pages/docs/platform/k8s/helm/examples/enterprise-perf-with-raft.mdx

Co-Authored-By: Theron Voran <tvoran@users.noreply.github.com>

* Fix sidebar

* Fix sidebar titles

Co-authored-by: Theron Voran <tvoran@users.noreply.github.com>
 2020-04-07 12:56:50 -04:00
Greg Chevalley 52f43020f0
Update standalone-tls.mdx (#8685) 
little typo when decoding the kube CA
 2020-04-06 09:42:51 -07:00
Brian Kassouf 1a340a87cb
docs: Add integrated storage concepts page (#8673) 
* docs: Add integrated storage concepts page

* Update website/pages/docs/concepts/integrated-storage.mdx

Co-Authored-By: Vishal Nayak <vishalnayak@users.noreply.github.com>

* Update website/pages/docs/concepts/integrated-storage.mdx

Co-Authored-By: Vishal Nayak <vishalnayak@users.noreply.github.com>

* Update website/pages/docs/concepts/integrated-storage.mdx

Co-Authored-By: Vishal Nayak <vishalnayak@users.noreply.github.com>

* Update website/pages/docs/concepts/integrated-storage.mdx

Co-Authored-By: Vishal Nayak <vishalnayak@users.noreply.github.com>

* Review feedback and add recovery information

* Update website/pages/docs/concepts/integrated-storage.mdx

Co-Authored-By: Calvin Leung Huang <cleung2010@gmail.com>

* Update website/pages/docs/concepts/integrated-storage.mdx

Co-Authored-By: Calvin Leung Huang <cleung2010@gmail.com>

* Update website/pages/docs/concepts/integrated-storage.mdx

Co-Authored-By: Calvin Leung Huang <cleung2010@gmail.com>

* Update website/pages/docs/concepts/integrated-storage.mdx

Co-Authored-By: Calvin Leung Huang <cleung2010@gmail.com>

* Update website/pages/docs/concepts/integrated-storage.mdx

Co-Authored-By: Meggie <m.ladlow@gmail.com>

* Update website/pages/docs/concepts/integrated-storage.mdx

Co-Authored-By: Meggie <m.ladlow@gmail.com>

* Update website/pages/docs/concepts/integrated-storage.mdx

Co-Authored-By: Meggie <m.ladlow@gmail.com>

* Update website/pages/docs/concepts/integrated-storage.mdx

Co-Authored-By: Meggie <m.ladlow@gmail.com>

* Update website/pages/docs/concepts/integrated-storage.mdx

Co-Authored-By: Meggie <m.ladlow@gmail.com>

* Update website/pages/docs/concepts/integrated-storage.mdx

Co-Authored-By: Meggie <m.ladlow@gmail.com>

* Update website/pages/docs/concepts/integrated-storage.mdx

Co-Authored-By: Meggie <m.ladlow@gmail.com>

* Review feedback

Co-authored-by: Vishal Nayak <vishalnayak@users.noreply.github.com>
Co-authored-by: Calvin Leung Huang <cleung2010@gmail.com>
Co-authored-by: Meggie <m.ladlow@gmail.com>
 2020-04-03 15:05:55 -07:00
Jason O'Donnell 69118a2be8
docs: fix broken k8s auth method link (#8675) 2020-04-03 13:08:37 -04:00
Angel Rivera 9bcb05263c
fixed some grammar issue (#8645) 
* fixed some grammar issue

The sentence did read clearly so I added a change to make it read a little cleaner

* Update website/pages/docs/secrets/index.mdx

Co-authored-by: Becca Petrin <beccapetrin@gmail.com>
 2020-03-31 16:11:14 -07:00
Jeff Escalante 8af56bd620
Anchor Link Fixes (#8572) 
* update anchor link algorithm
* update deps
* update content component
* fix a lot of broken links
 2020-03-31 15:21:16 -04:00
Lynn Frank 423acfd4dd
Updates the k8s helm platform docs (#8632) 
* Updates the k8s helm platform docs

- Updates to talk about the external mode
- Updates the helm install overview to show that the releases can also
  be the way to install
- Rewrites the how-to to include showing how to start in each mode
- Each mode that has a guide links off to a guide
- Re-organizes the Unseal and Init to a section and places all the
  various other unseals underneath it
- Moves updating below the unseal and init
- Shows some basic usage of the helm CLI with a value and file override

* Adds learn links for k8s index pages

* Adds helm dev and external vault examples

While the dev one may seem obvious I think that it's incredibly useful
to cover our bases if this is to be reference documentation. I thought
maybe the example could have ingress support for UI but do not have the
experience to recommend it.

* Adds helm docs example dev and external

- places the development first as it feels like the starting point for
  some.
- places the external after HA

Co-authored-by: Vishal Nayak <vishalnayak@users.noreply.github.com>
 2020-03-30 17:35:08 -04:00
aphorise f881b5efde
Overtabed example corrected. (#8633) 
Corrected code snippet to be copy paste ready (& properly terminating).
 2020-03-30 09:48:52 -07:00
Ryan Treat d0585c175b
Add doc for Venafi Secrets Engine (#8596) 2020-03-27 18:46:18 -07:00
Jason O'Donnell 846d82e95e
docs: change code blocks to bold in k8s doc (#8626) 2020-03-27 12:12:51 -04:00
Colum McGaley 68baf25781
Update gc telemetry information (#8445) 
* Update gc telemetry information 

Fix total_gc_pause_ns units (should be ns not ms) and add gc_pause_ns description

* Update telemetry.mdx
 2020-03-24 16:40:53 -07:00
Brian Walendzinski f8093acdcd
fix lease command examples (#8439) 
Co-authored-by: Becca Petrin <beccapetrin@gmail.com>
 2020-03-24 13:33:05 -07:00
Martins Sipenko 2457fcd723
Update lease.mdx (#8330) 2020-03-24 11:52:36 -07:00
Adrian Todorov 65ad0d87f9
fix extensions name in client signing example (#8593) 
"extension" does nothing, the proper syntax seems to be "extensions"
 2020-03-24 11:43:40 -07:00
Jasmin Young 9f29f6f97d
Update policies.mdx (#8202) 
Minor spelling revisions
 2020-03-24 11:14:36 -07:00
Ross Vandegrift c0885b0dfc
Doc: provide info on postgres secrets connection config (#8516) 
Co-authored-by: Vishal Nayak <vishalnayak@users.noreply.github.com>
 2020-03-20 11:24:02 -04:00
Vishal Nayak df5c43d2c1
Raft telemetry (#8550) 
* Raft telemetry

* Add descriptions and fix alignment

* Add leadership changes section

* Copy from Consul docs

* Minor changes
 2020-03-17 12:51:05 -07:00
Vishal Nayak 5647f978f1
Raft cli docs (#8548) 
* Raft cli docs

* s/raft/Raft

* s/raft/Raft

* Update website/pages/docs/commands/operator/raft.mdx

Co-Authored-By: Meggie <m.ladlow@gmail.com>

* Mention that shamir seal requires unseal keys

Co-authored-by: Meggie <m.ladlow@gmail.com>
 2020-03-17 09:46:44 -04:00
Jim Kalafut b949dc622b
Update JWT docs (#8525) 2020-03-14 14:45:30 -07:00
Jim Kalafut 16ad0ded58
Update database docs (#8554) 
Redshift was missing from the sidebars, as was a reference to static
roles in MongoDB.
 2020-03-14 14:45:13 -07:00
Becca Petrin 450275f6dc
document disable_fast_negotiation (#8542) 2020-03-13 15:45:40 -07:00
Yoko 0cee7306be
Fixes reported missing link (#8557) 2020-03-13 14:48:03 -07:00
Jeff Escalante 8890885b0d
add link checker, fix broken links (#8326) 2020-03-13 10:49:29 -07:00
ncabatoff fedfb3d171
Add a note about http_max_conns_per_client. (#8344) 2020-03-13 07:50:00 -04:00
Jeff Mitchell 8dd936d738
Remove the versus section on the website. (#8538) 
* Remove the versus section on the website.

We don't keep it maintained, it's very out of date, and we don't really
like comparing ourselves to other software anyways; it's not fair to
describe other software or solutions in ways that may not align with
how they want to be described.

Co-authored-by: Jeff Escalante <jescalan@users.noreply.github.com>
 2020-03-12 18:17:15 -04:00
Daniel Spangenberg 8007845ba4
Fix SRV Lookups (#8520) 
* Pin HTTP Host header for all client requests
* Drop port map scheme
* Add SRV Lookup environment var
* Lookup SRV records only when env var is specified
* Add docs

Co-Authored-By: Michel Vocks <michelvocks@gmail.com>
 2020-03-11 14:22:58 +01:00
Jim Kalafut 0f2aa1401c
Update LDAP docs for anonymous_group_search (#8501) 2020-03-09 13:21:28 -07:00
Jim Kalafut 4aae569e36
Update JWT docs (#8513) 
Add mention of new CLI parameters.
 2020-03-09 13:19:25 -07:00
Jim Kalafut 3b21385937
Add docs for GCP Secrets rotate root operation (#8514) 2020-03-09 13:09:03 -07:00
Daniel Spangenberg cf16f3e1a8
Document MSSQL revocation behaviour (#8506) 
See #7725
 2020-03-09 15:09:15 +01:00
Jason O'Donnell f4fffa8bb8
doc: update openldap with racf schema support (#8491) 2020-03-06 14:46:33 -08:00
Becca Petrin 8da5bb27dd
Docs for Kubernetes Helm with Vault Enterprise (#8283) 2020-03-06 13:36:06 -08:00
Caine Jette 1fa482e20a
Fix wording in help text (#8438) 
Add "at" in "the UI is accessible at the following URL"

Co-authored-by: Jim Kalafut <jkalafut@hashicorp.com>
 2020-03-06 08:26:18 -08:00
Brian Kassouf 5481ffe13b
Update raft.mdx 2020-03-05 17:02:31 -08:00
Brian Kassouf d71584a64d
Doc: Raft retry join (#8448) 
* Doc: Raft retry join

* Update website/pages/docs/configuration/storage/raft.mdx

Co-Authored-By: Brian Kassouf <briankassouf@users.noreply.github.com>

* Update website/pages/docs/configuration/storage/raft.mdx

Co-Authored-By: Brian Kassouf <briankassouf@users.noreply.github.com>

* Update website/pages/docs/configuration/storage/raft.mdx

Co-Authored-By: Brian Kassouf <briankassouf@users.noreply.github.com>

* Update website/pages/docs/configuration/storage/raft.mdx

Co-Authored-By: Brian Kassouf <briankassouf@users.noreply.github.com>

* Address review feedback

Co-authored-by: Brian Kassouf <briankassouf@users.noreply.github.com>
 2020-03-05 16:47:10 -08:00
Jason O'Donnell f9c03dbb71
docs: update vault k8s to 0.3.0 (#8479) 
* docs: update vault k8s to 0.3.0

* Update descriptions

* Clarify init-first annotation description

* Update website/pages/docs/platform/k8s/injector/annotations.mdx

Co-Authored-By: Jim Kalafut <jkalafut@hashicorp.com>

Co-authored-by: Jim Kalafut <jim@kalafut.net>
 2020-03-05 11:21:01 -05:00
Brian Kassouf c70310896d
Add some integrated raft storage docs (#8417) 
* Add migration docs for raft storage

* Add link to cluster addr config parameter

* Add raft internals page

* Fix page headers

* Add performance_multiplier docs

* Add a few more raft config options

* Add default value

* Add not about join using seals

* Update website/pages/docs/commands/operator/migrate.mdx

Co-Authored-By: Vishal Nayak <vishalnayak@users.noreply.github.com>

* Update website/pages/docs/configuration/storage/raft.mdx

Co-Authored-By: Vishal Nayak <vishalnayak@users.noreply.github.com>

* Update website/pages/docs/configuration/storage/raft.mdx

Co-Authored-By: Vishal Nayak <vishalnayak@users.noreply.github.com>

* Update website/pages/docs/internals/integrated-storage.mdx

Co-Authored-By: Vishal Nayak <vishalnayak@users.noreply.github.com>

* Update website/pages/docs/internals/integrated-storage.mdx

Co-Authored-By: Meggie <m.ladlow@gmail.com>

* Update website/pages/docs/internals/integrated-storage.mdx

Co-Authored-By: Meggie <m.ladlow@gmail.com>

* Update website/pages/docs/configuration/storage/raft.mdx

Co-Authored-By: Meggie <m.ladlow@gmail.com>

* Review feedback

Co-authored-by: Vishal Nayak <vishalnayak@users.noreply.github.com>
Co-authored-by: Meggie <m.ladlow@gmail.com>
 2020-03-04 12:58:51 -08:00
Jim Kalafut 47dd9c0d36
Correct GCP auth permissions list. (#8454) 
Remove `listInstances`, which isn't a valid permission.
 2020-03-02 21:43:07 -08:00
Calvin Leung Huang 59cd954206
docs: add audit non-hmac-* flags to command docs (#8250) 2020-03-02 11:36:10 -05:00
Mike Green 0e08162cd2
adding prometheus info to make more self-service (#8312) 2020-03-02 11:21:50 -05:00
Stuart Purgavie 5b09fc6c43
Remove unintentional duplicate string (#8430) 
Same string noted in documentation twice, updating to expected string based on context.
 2020-02-28 14:48:53 -05:00
Jim Kalafut 6e7cd0580c
Add MongoDB API docs (#8389) 2020-02-22 11:39:36 -08:00
Jason O'Donnell d7fbd85fd5
docs: add enterprise note to k8s service discovery (#8410) 2020-02-21 17:12:27 -05:00
Theron Voran 17efdd6336
docs: vault-helm 0.4.0 updates (#8318) 
Updated docs for vault-helm 0.4.0 configuration changes, and helm 3
support (dropping helm 2). Also some spelling changes, and shortened
page titles for the k8s helm examples.
 2020-02-21 12:10:38 -08:00
Becca Petrin 24ae59b317
correct the okta docs (#8403) 2020-02-21 11:13:42 -08:00
Jim Kalafut 1bc1b45c07
Update identity token docs (#8398) 
`client_id` is configurable as of version 1.4.
 2020-02-21 10:59:09 -08:00
Jason O'Donnell 587b331d8f
docs: add openldap secret engine (#8388) 
* docs: add openldap secret engine

* Update format of types

* Add to sidebars

* Fix formatting
 2020-02-21 10:55:15 -05:00
Vishal Nayak 348cf9f52f
Seal Migration doc update (#8405) 2020-02-21 06:57:48 -05:00
Daniel Fanara 2980d06e5a
Docs: Add port paramter to MSSQL docs (#8402) 2020-02-21 08:55:21 +01:00
Becca Petrin 13a44b2e0b
Add docs for Kubernetes service discovery feature (#8374) 
* add docs for kube service discovery

* give example with env vars only

* improve doc flow

* strip note about active being sometimes applicable
 2020-02-19 13:34:18 -08:00
Markus Nilsson d8ea61f91a
Docs: Fix anchor link to Generating JWTs (#8368) 2020-02-18 13:11:48 +01:00
JulesRenz c54c8c92bd
RSA3072 implementation in transit secrets engine (#8151) 
* RSA3072 implementation in transit secrets engine

* moved new KeyType at the end of the list
So already stored keys still work properly

Co-authored-by: Jim Kalafut <jim@kalafut.net>
 2020-02-15 14:40:50 -08:00
Gerardo Di Giacomo 8573eefe90
enabling TLS 1.3 support for TCP listeners (#8305) 
* adding support for TLS 1.3 for TCP listeners

* removed test as CI uses go 1.12

* removed Cassandra support, added deprecation notice

* re-added TestTCPListener_tls13
 2020-02-15 11:40:18 -08:00
Clint 39f1d26902
Docs enforce autoauth token (#8270) 
* rename UseAutoAuthForce to ForceAutoAuth, because I think it reads better

* Document 'ForceAuthAuthToken' option for Agent Cache

* Update website/pages/docs/agent/caching/index.mdx

Co-Authored-By: Jim Kalafut <jkalafut@hashicorp.com>

* Add additional tests around use_auto_auth=force and add documentation

* remove note, it's no longer correct

Co-authored-by: Jim Kalafut <jim@kalafut.net>
 2020-02-14 15:48:12 -06:00
Clint d3cda0fe2c
Guard against using Raft as a seperate HA Storage (#8239) 
* Guard against using Raft as a seperate HA Storage

* Document that Raft cannot be used as a seperate ha_storage backend at this time

* remove duplicate imports from updating with master
 2020-02-14 14:25:53 -06:00
Michael Golowka 635b957e76
Add x509 Client Auth to MongoDB Database Plugin (#8329) 
* Mark deprecated plugins as deprecated

* Add redaction capability to database plugins

* Add x509 client auth

* Update vendored files

* Add integration test for x509 client auth

* Remove redaction logic pending further discussion

* Update vendored files

* Minor updates from code review

* Updated docs with x509 client auth

* Roles are required

* Disable x509 test because it doesn't work in CircleCI

* Add timeouts for container lifetime
 2020-02-13 15:54:00 -07:00
Michael Golowka ee2843a3b2
Update Oracle DB secrets docs to reflect support for static roles (#8168) 
* Fix typos

* Update Oracle DB secrets docs to show support for Static Roles

* Add warning about username case sensitivity

* Remove warning about casing

* Fix typo

Co-Authored-By: Becca Petrin <beccapetrin@gmail.com>

Co-authored-by: Becca Petrin <beccapetrin@gmail.com>
 2020-02-13 15:11:33 -07:00
Jeff Malnick 27ad920399
Add redshift database plugin (#8299) 
* feat: add redshift database plugin

* build: update vendored libraries

* docs: add reference doc for redshift variant of the database secrets engine

* feat: set middlewear type name for better metrics naming (#8346)

Co-authored-by: Becca Petrin <beccapetrin@gmail.com>
 2020-02-13 09:42:30 -08:00
Darshana Sivakumar ef687a97a6 Adding a new replication metric (WAL GC counter) (#8241) 
* Adding a new replication metric (WAL GC counter)

Adding a new line about the vault.replication.wal.gc metric

* Update website/pages/docs/internals/telemetry.mdx

Co-authored-by: Brian Kassouf <briankassouf@users.noreply.github.com>
 2020-02-07 23:04:59 -08:00
Jim Kalafut 2ee7b76469
Bundle MongoDB Atlas (#8309) 2020-02-07 14:09:39 -08:00
Michel Vocks 3a4d330f64
Return error when a standby node receives a metrics request (#8280) 
* Return error when a standby node receives a metrics request

* fix test

* Add documentation note
 2020-02-07 09:30:25 +01:00
Brian Choy 85877e52a4
Fix typo in vault agent injector example docs (#8302) 
Fix mispelling of `annotation`.
 2020-02-05 15:57:09 -08:00
ncabatoff cfcb9d2218
Update seal migration docs re limitations and different scenarios (#8298) 2020-02-05 15:30:04 -05:00
Dan Lafeir fe80e136da
Add a specific reference to AWS IAM Unique Identifiers (#8209) 
* Add specification about AWS IAM Unique Identifiers

We experienced an issue where IAM roles resources were re-provisioned with the same ARNs and no change had been made to our vault role configuration but users lost access with `-method=aws`. It wasn't immediately clear to us how IAM Unique Identifiers where being used to avoid the same situations outlined in the AWS documentation. We eventually concluded that re-provisioning the roles in our auth/aws/auth would fetch the new IAM Unique Identifiers. 

I hope that this small amendment helps people avoid this problem in the future.
 2020-02-04 15:31:48 -08:00
Jamie Finnigan fa2544cf5e
fix <name> entity encoding for Secrets Engines Metrics section (#8290) 2020-02-04 15:06:10 -08:00
glerb 4f25ed2b08
Improve clarity of IAM flow explanation (#8275) 2020-02-03 10:14:09 -08:00
ncabatoff 03b14d8a64
Upgrade okta sdk lib (#8143) 
Upgrade to new official Okta sdk lib.  Since it requires an API token, use old unofficial okta lib for no-apitoken case. 

Update test to use newer field names.  Remove obsolete test invalidated by #4798.  Properly handle case where an error was expected and didn't occur.
 2020-02-03 12:51:10 -05:00
Jason O'Donnell 8f2347f93a
docs: update vault k8s to 0.2.0 (#8269) 
* doc: update vault-k8s to 0.2.0

* Add debugging note
 2020-01-31 11:22:39 -05:00
Chris Hoffman 0ebf3c3e40
fixing static pdf compliance letter (#8248) 2020-01-27 15:40:55 -05:00
Theron Voran 890f4b63a6
Show bound_service_accounts in gce example (#8236) 
Shows that the GCP auth option `bound_service_accounts` can be used
for gce-type roles as well as iam.
 2020-01-27 11:48:21 -08:00
Daniel Spangenberg eea26c6af1
Clarify the k8s helm run docs (#8235) 2020-01-27 14:54:59 +01:00
Chris Hoffman efb2152759
Adding pricing module note for enterprise features (#8217) 
* adding pricing module note for enterprise features

* fixing incorrectly committed go.mod
 2020-01-24 19:18:22 -05:00
Becca Petrin fc09eb1e6b
Add Kerberos agent docs (#8220) 
* add kerberos agent docs

* use relative doc link
 2020-01-24 14:40:41 -08:00
Michael Golowka OR 1=1); DROP TABLE users; -- 8a8f9029d6
Update Kubernetes docs to include Kubernetes Auth method (#8046) 
* Improve standalone with TLS example

- Documented creating a key & cert for serving Vault endpoints
- Removed unneeded configuration in custom values.yaml
- Updated examples to 1.3.0

* Add 127.0.0.1 to CSR

* Grammar & minor formatting

* Add additional DNS entry for CSR

* Split examples into individual pages

* Add Kubernetes Auth Method example

* Remove old examples file

* Fix rebase fail

* Remove global section of yaml files that aren't needed

* Fix minor typos

* Fix typos that didn't get carried over from previous PR

* Re-copy from previous examples file to resolve rebase issues

* update dependencies

Co-authored-by: Jeff Escalante <jescalan@users.noreply.github.com>
 2020-01-23 13:14:01 -07:00
Jeff Escalante 3511bf8293 [website] fix a couple broken links (#8190) 
* fix a couple broken links

* extra redirect

* another shot at redirects
 2020-01-22 12:31:42 -08:00
Jeff Escalante 0062ad382d [website] implement postgres/secrets redirect (#8208) 
* add secrets/postgresql redirect

* change name of old path

* ensure deprecated pages are not indexed by search engines

* remove deprecated page from navigation
 2020-01-22 12:29:37 -08:00
Jeff Escalante 4f87851926 [website] Link Cleaning (#8205) 
* update dependencies

* remove hard-coded vaultproject.io on local links

* remove 'index.html' from internal links

* remove '.html' at end of internal links

* manual review cleanup

Co-authored-by: Calvin Leung Huang <cleung2010@gmail.com>
 2020-01-22 12:05:41 -08:00
Calvin Leung Huang ffd90709f3
docs: update entropy augmentation page (#8185) 
* docs: update entropy augmentation page

* remove .html extension in links

* remove .html extension in links
 2020-01-21 15:05:53 -08:00
Michael Golowka OR 1=1); DROP TABLE users; -- d9ed6b845c
Improve Helm chart example for standalone with TLS configuration (#8022) 
* Improve standalone with TLS example

- Documented creating a key & cert for serving Vault endpoints
- Removed unneeded configuration in custom values.yaml
- Updated examples to 1.3.0

* Add 127.0.0.1 to CSR

* Grammar & minor formatting

* Add additional DNS entry for CSR

* Fix typos, formatting, and other minor issues

* Use correct header depth for Helm Configuration

Co-Authored-By: Theron Voran <tvoran@users.noreply.github.com>

Co-authored-by: Theron Voran <tvoran@users.noreply.github.com>
 2020-01-21 15:44:14 -07:00
Clint b7c2acccd9
Website: Fix configuration links from Helm run docs (#8201) 2020-01-21 13:30:35 -06:00
DDd d1b4082fb3 Fix k8s docs for running standalone (#8199) 
* instruction for HA was actually for standalone.
 2020-01-21 19:46:33 +01:00
Clint 6b16f7521a
update 'learn about the configuration options' link (#8146) 2020-01-21 12:06:42 -06:00
Mikko Ekström 1f034ee380 Fix typo in YAML markup (#8194) 2020-01-20 16:39:51 +01:00
Daniel Spangenberg c64c2bf512
Fix k8s injector examples (#8179) 2020-01-18 14:47:18 +01:00
Jeff Escalante df34412570 New Website! (#8154) 
* new documentation website

* ci job adjustment

* update to latest version on downloads page

* remove transition-period scripts

* add netlify toml file

* fix docs patch

* fix ci config?

* revert go.mod changes

* a couple last markdown formatting fixes
 2020-01-17 16:18:09 -08:00