luxolus/open-vault
2
0
Fork 0
Code Issues 1 Pull requests Releases Activity
12959 commits 1 branch 0 tags 214 MiB
Commit graph

323 commits

Author SHA1 Message Date
Ronen Botzer c602f9999f
A Database Secrets Engine plugin for Aerospike (#10522) 
* A Database Secrets Engine plugin for Aerospike

* Order the subsections consistently
 2020-12-15 15:13:56 -08:00
Tomas Gustavsson fc9fa540af
Add PrimeKey EJBCA as partner secrets plugin (#10531) 
* Add PrimeKey EJBCA as partner secrets plugin

* Update website/pages/docs/plugin-portal/index.mdx

* Update website/pages/docs/plugin-portal/index.mdx

Co-authored-by: Calvin Leung Huang <cleung2010@gmail.com>
 2020-12-14 17:37:09 -08:00
acahn b969a23f84
Update index.mdx (#10574) 
Modernizing the Partner language as part of the evolution of the partner program.
 2020-12-14 17:08:44 -08:00
Nick Cabatoff 6c5183abda
Fix link to autosnap api docs. (#10521) 2020-12-09 16:19:15 -05:00
danielehc 98f516aa58
Add details on Consul token ttl (#10470) 
* Add details on Consul token ttl

* Update website/pages/docs/secrets/consul/index.mdx

Co-authored-by: Kent 'picat' Gruber <kent@hashicorp.com>

Co-authored-by: Kent 'picat' Gruber <kent@hashicorp.com>
Co-authored-by: Vishal Nayak <vishalnayak@users.noreply.github.com>
 2020-12-09 08:20:21 -05:00
Kyle Rarey 6fec9f68e3
Correct key length in Transit storage limits (#10422) 
The AES256-GCM96 key was mis-labeled as AES128 under Transit storage limits. Corrected the table.

Co-authored-by: Mark Gritter <mgritter@hashicorp.com>
 2020-12-07 11:43:24 -06:00
Mike Wickett 6a6f1d67c8
website: fix broken link to api docs (#10501) 2020-12-04 11:55:20 -08:00
Jason O'Donnell 8d8b7f287f
docs: fix auth/k8s broken link (#10495) 2020-12-03 16:24:37 -05:00
Brian Kassouf 264f12e72a
Telemetry consul transaction (#10486) 
* Update consul.go

* Update telemetry.mdx
 2020-12-03 11:19:08 -08:00
Jaskanwal Pawar 8a5a456fdb
Fix typo about environment variable in docs (#10259) 
The CLI appears to read from `VAULT_CACERT` instead of `VAULT_CA_CERT` as the docs currently say. Basing this off code [here](a8566c4f89/api/client.go (L30)) and personal observation
 2020-12-02 16:09:00 -07:00
Mike Green f6138a98d1
clarify secret revoke during mount disable (#10483) 2020-12-02 12:55:47 -05:00
Austin Gebauer a50cf45b23
corrects a typo in the azure secrets docs (#10455) 2020-11-25 12:26:04 -08:00
Mark Gritter 123b30631d
Added documentation for vault operator usage. (#10432) 
Co-authored-by: swayne275 <swayne@hashicorp.com>
 2020-11-23 20:10:48 -06:00
Josh Black b8ba047b35
Allow Vault Agent to run as a Windows service (#10231) 2020-11-23 14:24:32 -08:00
Hridoy Roy 9030ec32ef
Telemetry documentation: Lease Expiry Metrics (#10377) 
* telemetry doc update

* upgraded telemetry configuration docs

* review comments update
 2020-11-23 11:06:41 -08:00
Nick Cabatoff dad10ddabc
Avoid using "KMS seal" since it causes confusion: some people think that excludes HSMs, and it's not obvious that Transit is a KMS. (#10414) 
Highlight that recovery keys can't be used for recovery when an auto seal is broken (unfortunate name, that.)
 2020-11-23 08:59:25 -05:00
Meggie 87df286a24
Update to list policy & some raft docs (#10396) 
* Update to list policy docs

It seems
(https://github.com/hashicorp/vault/blob/master/http/logical.go#L137) we
do not require the trailing slash any more.
Also added notes about go-discover

* Added additional note on quorum

* Added link to remove-peer command
 2020-11-20 17:14:28 -05:00
Roger Berlind f5973c6dad
Change API token to ACL token (#10425) 2020-11-20 11:07:27 -08:00
Dave D'Amico 9ece4acead
remove space which caused formatting weirdness (#10415) 2020-11-18 11:08:06 -08:00
Yoko d926031159
Add Learn links (#10411) 
* Add Learn links

* Update website/pages/docs/secrets/transform/tokenization.mdx

Co-authored-by: Calvin Leung Huang <cleung2010@gmail.com>

Co-authored-by: Calvin Leung Huang <cleung2010@gmail.com>
 2020-11-17 16:56:30 -08:00
Michael Golowka 69bbecea78
Clarify JWT in kubernetes auth docs (#10403) 2020-11-16 16:45:12 -07:00
Yoko 492ed5b319
Update 'sane' default to say 'reasonable' default (#10400) 2020-11-16 14:19:18 -08:00
Michael Golowka 2cbd4a9e00
Add note about Database engine interface (#10372) 2020-11-13 10:44:21 -07:00
Jim Kalafut 17fea5cea9
Add automated raft snapshots to sidebar (#10387) 2020-11-12 08:53:23 -08:00
Meggie d511cef5df
Added upgrade note about go version (#10385) 2020-11-11 18:26:11 -05:00
Scott Miller d17917341c
Transform doc fix (#10383) 
* Add tokenization

* Fixes
 2020-11-11 12:54:11 -06:00
Jim Kalafut 3cdad923f4
Add 1.6 Release Notes (#10378) 
* Add 1.6 Release Notes

* Remove usage command

* Apply suggestions from code review

* Website version + CHANGELOG

Co-authored-by: Meggie <meggie@hashicorp.com>
 2020-11-11 10:36:23 -05:00
Scott Miller 2db96ae7ac
Add upgrade note for Transform (#10371) 
* Add upgrade note for tokenization

* nav

* Just 1.5

* Clarify relationship to API changes

Co-authored-by: Meggie <meggie@hashicorp.com>
 2020-11-11 10:33:51 -05:00
Austin Gebauer c62582e0de
docs: adds documentation for key management secrets engine (#10353) 
Co-authored-by: Clint <catsby@users.noreply.github.com>
Co-authored-by: Yoko <yoko@hashicorp.com>
 2020-11-10 09:28:28 -08:00
Dave D'Amico 1b2a198212
More info on when vm params are not needed (#10362) 
* more info on when vm params are not needed

* more updates
 2020-11-09 11:49:03 -08:00
Jim Kalafut dae4bc5fbc
Update azure.mdx (#10347) 2020-11-09 11:20:06 -08:00
Scott Miller b6b3ec79ca
Land Tokenization docs (#10357) 2020-11-09 10:58:54 -06:00
Josh Black a361d1299b
Add plugin reload docs to the website sidebar (#10108) 2020-11-06 14:13:12 -08:00
Nick Cabatoff 48103c71fe
Add autosnapshot docs. (#10338) 2020-11-06 15:56:52 -05:00
Tom Proctor 61c5da6911
Update MongoDB Atlas plugin docs (#10343) 
Root credential rotation not supported as the Vault user uses public/private keys instead of passwords to authenticate.
 2020-11-06 19:16:48 +00:00
Brian Kassouf caf65bfae7 Add new metrics to the telemetry page 2020-11-05 15:05:07 -08:00
Georges Jamous fba851dbe9
Update raft.mdx (#10329) 2020-11-05 12:33:50 -08:00
Mark Gritter f742277996
Documentation for client count / activity log API. (#10315) 
* Documentation for client count API.
* New concepts page
Co-authored-by: swayne275 <swayne@hashicorp.com>
 2020-11-05 11:47:48 -06:00
Austin Gebauer e32e1e17c7
docs: clarify location of service account key file for google-specific OIDC handling (#10313) 2020-11-02 17:45:05 -08:00
Brian Kassouf 8af08c3221
Add an env var to enable a permit pool that limits lease expirations (#10268) 
* Add a flag to enable a permit pool to gate lease expiration

* Use the env var to get the size

* Add logs and metris to help debug this

Co-authored-by: Hridoy Roy <roy@hashicorp.com>
 2020-10-30 14:45:44 -07:00
Theron Voran 16eb1489d1
Update OIDC namespace_in_state docs (#10269) 
To reflect the default of true for new configs.
 2020-10-30 08:15:34 -07:00
aphorise f172eb9477
Docs - examples of IPv6 added in listener section of configurations. (#9601) 2020-10-29 15:12:18 -04:00
akosuadenell ab5b8bc6bf
Update index.mdx (#10262) 2020-10-29 12:04:48 -07:00
Hridoy Roy f8a248ce48
Port: change leader status metric name to active (#10245) 
* change active node metric name

* comment to see if commit is fine

Co-authored-by: Hridoy Roy <hridoyroy@Hridoys-MacBook-Pro.local>
 2020-10-29 10:30:45 -07:00
Jonas-Taha El Sesiy b7cf4a05ff
Add support for Managed Identity auth for physical/Azure (#10189) 
* Add support for Managed Identity auth for physical/Azure

Obtain OAuth token from IMDS to allow for access to Azure Blob with
short-lived dynamic credentials

Fix #7322

* add tests & update docs/dependencies
 2020-10-28 15:04:26 -07:00
Jason O'Donnell a4bcbb84e2
docs: fix k8s helm configuration rendering (#10257) 2020-10-28 10:51:40 -04:00
Hridoy Roy 0259be04e0
Port: Add metrics to report mount table sizes for auth and logical [Vault 671] (#10201) 
* first commit

* update

* removed some ent features from backport

* final refactor

* backport patch

Co-authored-by: Hridoy Roy <hridoyroy@Hridoys-MacBook-Pro.local>
Co-authored-by: Hridoy Roy <hridoyroy@Hridoys-MBP.hitronhub.home>
 2020-10-27 08:24:43 -07:00
Jason Witkowski ebfaa551eb
Add ability to specify region for OCI Storage Backend (#9302) 
* Add ability to specify region for OCI Storage Backend

* Fix capitalization in Vault documentation

Co-authored-by: Josh Black <raskchanky@users.noreply.github.com>
Co-authored-by: Vishal Nayak <vishalnayak@users.noreply.github.com>
 2020-10-26 18:28:32 -04:00
Theron Voran d8dc45f03f
UI/OIDC: allow passing namespace in state (#10171) 
* UI/OIDC: allow passing namespace in state

Suppport in the UI OIDC callback flow to parse namespace out of the
state parameter instead of a separate query parameter in the
redirect_uri. Includes docs for the option that enables this behavior
in the JWT plugin.

* 1.6 wordsmithing

* pass_namespace_in_state -> namespace_in_state

* re-wording

* use strict equals

Co-authored-by: Vishal Nayak <vishalnayak@users.noreply.github.com>
 2020-10-26 18:17:21 -04:00
Michael Golowka e07fe992ef
DBPW - Add readme to dbplugin package (#10230) 2020-10-26 13:57:02 -06:00