ad1621dd5f
Add documentation about the horizontal cluster scalability of PKI secret engine operations ( #10745 )
...
* Add documentation about the horizontal cluster scalability of PKI secret engine operations
* Mention generate_lease
* cluster terminology
* Discuss generate_lease
* active again
* One more go
2021-02-09 11:00:24 -06:00
1e7b38fc75
website: upgrade nextjs-scripts & next ( #10831 )
2021-02-09 10:54:58 -05:00
aaa51e975f
Add docs for OpenLDAP dynamic secrets ( #10817 )
2021-02-05 10:49:29 -07:00
b1c4b86d7f
approle: add ttl to the secret ID generation response ( #10826 )
...
* approle: add ttl to the secret ID generation response
* approle: move TTL derivation into helper func
* changelog: add changelog entry
* docs: update approle docs and api-docs pages
2021-02-03 16:32:16 -08:00
84cb949802
k8s doc: update for 0.9.1 and 0.8.0 releases ( #10825 )
...
* k8s doc: update for 0.9.1 and 0.8.0 releases
* Update website/content/docs/platform/k8s/helm/configuration.mdx
Co-authored-by: Theron Voran <tvoran@users.noreply.github.com>
Co-authored-by: Theron Voran <tvoran@users.noreply.github.com>
2021-02-02 16:37:34 -05:00
4a6e00081c
Web Updates for HCP (2/2) ( #10820 )
...
* Web Updates for HCP (2/2)
Adds HCP Vault section to homepage
Updates the Nav
Hack in a third 'try cloud' link
Update banner to point to HCP site
* website: utm params for all hcp links
Co-authored-by: Kyle MacDonald <kmacdonald@hashicorp.com>
2021-02-02 11:41:19 -05:00
1205d23e53
add table styles to the style.css ( #10793 )
2021-02-01 23:24:04 -05:00
449b9ddedb
Clarify docs around using the Vault Agent as a windows service ( #10519 )
2021-02-01 10:03:42 -08:00
3ec15c4927
Fix use of identity/group endpoint to edit group by name ( #10812 )
...
* Updates identity/group to allow updating a group by name (#10223 )
* Now that lookup by name is outside handleGroupUpdateCommon, do not
use the second name lookup as the object to update.
* Added changelog.
Co-authored-by: dr-db <25711615+dr-db@users.noreply.github.com>
2021-01-29 16:50:08 -06:00
588ce498d3
clarify space limits in bytes ( #10811 )
2021-01-29 14:43:48 -05:00
06e5ec9b53
Updating website to 1.6.2 ( #10810 )
2021-01-29 13:47:54 -05:00
936ce3ba62
Document identity behaviour on local auth mounts. ( #10805 )
2021-01-28 11:45:53 -05:00
17e20bdaa6
docs change for max request size community PR ( #10723 )
2021-01-27 10:02:00 -08:00
537189cab8
make token create case insensitive [VAULT-1021] ( #10743 )
...
* make token create case insensitive
* changelog
* comment update
2021-01-27 09:56:54 -08:00
d1241b5286
changelog for entropy augmentation PR [VAULT-1179] ( #10755 )
...
* changelog for entropy augmentation
* docs upgrade
* docs upgrade
* docs upgrade
* docs upgrade
2021-01-26 21:06:38 -08:00
46c3f1f7bc
docs: update "Policy Syntax" section ( #10590 )
...
Co-authored-by: mgritter <mgritter@hashicorp.com>
2021-01-26 22:14:47 -06:00
2ec8f9a222
metrics: activity log ( #10514 )
...
* core: add vault.identity.entity.active.monthly log
* Fixed end-of-month metrics and unit test.
* Added metric covering month-to-date (not broken down by namespace.)
* Updated documentation
* Added changelog.
Co-authored-by: mgritter <mgritter@hashicorp.com>
2021-01-26 16:37:07 -06:00
3cf16ac1f6
point edit page link to master ( #10778 )
2021-01-26 16:50:58 -05:00
fb049caa7f
Clarify agent lease renewal docs ( #10772 )
2021-01-26 12:07:59 -08:00
1ecd3464eb
fix deep links to consul-template docs ( #10768 )
2021-01-25 16:42:19 -08:00
c0c0dd5379
remove netlify config ( #10711 )
2021-01-22 15:16:25 -05:00
b0d5660765
Clarify slash is needed on gcs and azure ( #10710 )
...
Clarify user question, unexpected behavior with no slash on gcs.
2021-01-21 12:32:24 -05:00
086e8bbb74
Updates api-docs for static role deletion ( #10736 )
...
We now specify that the user will remain unless cleaned up manually
2021-01-20 12:57:00 -08:00
b93c5ff304
Spell out how to configure credentials for GCS. ( #10589 )
2021-01-20 09:09:23 -05:00
5e60bd9677
add vercel config ( #10707 )
2021-01-15 15:44:28 -05:00
f48841c6ea
Docs: prepare for vercel hosting move ( #10598 )
...
* prepare for move to vercel hosting
* update readme
* add back netlify files for hosting transition
2021-01-15 15:29:22 -05:00
b4d0403ef1
website: update alert banner for HCP Vault public beta ( #10699 )
2021-01-14 14:03:41 -05:00
339b8d62c2
Website StackMenu updates for 1/14 ( #10690 )
2021-01-14 09:19:09 -08:00
1ec64fd010
Update Snowflake docs ( #10691 )
...
* Update Snowflake docs
Snowflake docs had an issue, `DEFAULT ROLE` should be `DEFAULT_ROLE`
* Update docs to show an actual username
2021-01-13 14:59:16 -08:00
331529fc94
Aerospike storage backend ( #10131 )
...
* add an Aerospike storage backend
* go mod vendor
* add Aerospike storage configuration docs
* review fixes
* bump aerospike client to v3.1.1
* rename the defaultHostname variable
* relocate the docs page
2021-01-12 15:26:07 -08:00
d72c4d5235
website: add alert banner to promote webinar ( #10683 )
2021-01-11 11:17:03 -05:00
77d27cb968
Add NIST guidance on rotating keys used for AES-GCM encryption ( #10612 )
...
* Add NIST guidance on rotating keys used for AES-GCM encryption
* Capture more places barrier encryption is used
* spacing issue
* Probabilistically track an estimated encryption count by key term
* Un-reorder imports
* wip
* get rid of sampling
2021-01-07 15:37:37 -06:00
c788e98a16
Adding documentation for multiple vault-k8s replicas ( #10659 )
...
Describes the setup and config for using multiple injector replicas
with auto and manual TLS.
Co-authored-by: Tom Proctor <tomhjp@users.noreply.github.com>
2021-01-07 12:22:21 -08:00
6ed50b5df9
Move code highlighting to build time ( #10614 )
...
* Bump react-scripts to v14
* Pull in latest dependencies
* Replace text-and-content on home page
* WIP replace text-and-content on use case pages
* Finish removing text-and-content from use-case pages
* Remove text-and-content completely
* Add logo-grid dep, fix style import
* Remove unneeded indirect deps
2021-01-07 14:40:35 -05:00
d076d95d37
Feature flags API ( #10613 )
...
* Added sys/internal/ui/feature-flags endpoint.
* Added documentation for new API endpoint.
* Added integration test.
Co-authored-by: swayne275 <swayne@hashicorp.com>
2021-01-06 16:05:00 -06:00
9064097c5d
Make example Okta creds more obviously fake ( #10639 )
2021-01-06 10:05:23 -08:00
ce90acd68d
Add Snowflake docs to the website ( #10617 )
...
* Add snowflake docs to the website
* Update navs
* Add Snowflake to the DB Capabilities table
2021-01-05 14:44:28 -08:00
abfb92173c
docs: update Vault Helm to 0.9.0 ( #10656 )
...
* docs: update vault-helm for 0.9.0
* Fix typo in leaderElector config
* Add default value to ttl
* Update website/content/docs/platform/k8s/helm/configuration.mdx
Co-authored-by: Theron Voran <tvoran@users.noreply.github.com>
* Update website/content/docs/platform/k8s/helm/configuration.mdx
Co-authored-by: Theron Voran <tvoran@users.noreply.github.com>
* Update website/content/docs/platform/k8s/helm/configuration.mdx
Co-authored-by: Theron Voran <tvoran@users.noreply.github.com>
* Add affinity default for injector
* Update website/content/docs/platform/k8s/helm/configuration.mdx
Co-authored-by: Theron Voran <tvoran@users.noreply.github.com>
Co-authored-by: Theron Voran <tvoran@users.noreply.github.com>
2021-01-05 16:46:20 -05:00
5c446d9d53
Clarify which seal/recovery config we mean. ( #10634 )
2021-01-04 10:31:36 -05:00
69e68c4d0d
Document constraints re primary vs secondary clusters. ( #10527 )
2021-01-04 08:35:17 -05:00
ec620a7765
Implement MDX Remote ( #10581 )
...
* implement mdx remote
* fix an unfenced code block
* fix partials path
Co-authored-by: Jim Kalafut <jkalafut@hashicorp.com>
2020-12-17 16:53:33 -05:00
210618d2b9
Updating version to 1.6.1 ( #10566 )
...
Will merge this after the release is done.
2020-12-17 12:52:03 -05:00
a605f9ddd6
Update to add the newly released Couchbase DB SE ( #10580 )
...
* Update to add the newly released Couchbase DB SE
* Update website/pages/docs/plugin-portal/index.mdx
Co-authored-by: Calvin Leung Huang <cleung2010@gmail.com>
Co-authored-by: Calvin Leung Huang <cleung2010@gmail.com>
2020-12-15 16:55:38 -08:00
c602f9999f
A Database Secrets Engine plugin for Aerospike ( #10522 )
...
* A Database Secrets Engine plugin for Aerospike
* Order the subsections consistently
2020-12-15 15:13:56 -08:00
191aa65bc3
Fix UI custom header values ( #10511 )
...
* Fix UI custom header values
* Fix changelog entry
* Introduce param for multi values
* Fix multivalue
* multivalue should be bool
* Sort imports
* Fix conflict
* Remove changelog entry
* Revert entry delete
2020-12-15 15:58:03 +01:00
fc9fa540af
Add PrimeKey EJBCA as partner secrets plugin ( #10531 )
...
* Add PrimeKey EJBCA as partner secrets plugin
* Update website/pages/docs/plugin-portal/index.mdx
* Update website/pages/docs/plugin-portal/index.mdx
Co-authored-by: Calvin Leung Huang <cleung2010@gmail.com>
2020-12-14 17:37:09 -08:00
b969a23f84
Update index.mdx ( #10574 )
...
Modernizing the Partner language as part of the evolution of the partner program.
2020-12-14 17:08:44 -08:00
acd0cd037c
website: redirect raft snapshot url to automated storage snapshots ( #10553 )
2020-12-14 12:48:58 -05:00
6c5183abda
Fix link to autosnap api docs. ( #10521 )
2020-12-09 16:19:15 -05:00
98f516aa58
Add details on Consul token ttl ( #10470 )
...
* Add details on Consul token ttl
* Update website/pages/docs/secrets/consul/index.mdx
Co-authored-by: Kent 'picat' Gruber <kent@hashicorp.com>
Co-authored-by: Kent 'picat' Gruber <kent@hashicorp.com>
Co-authored-by: Vishal Nayak <vishalnayak@users.noreply.github.com>
2020-12-09 08:20:21 -05:00
6fec9f68e3
Correct key length in Transit storage limits ( #10422 )
...
The AES256-GCM96 key was mis-labeled as AES128 under Transit storage limits. Corrected the table.
Co-authored-by: Mark Gritter <mgritter@hashicorp.com>
2020-12-07 11:43:24 -06:00
6a6f1d67c8
website: fix broken link to api docs ( #10501 )
2020-12-04 11:55:20 -08:00
8d8b7f287f
docs: fix auth/k8s broken link ( #10495 )
2020-12-03 16:24:37 -05:00
264f12e72a
Telemetry consul transaction ( #10486 )
...
* Update consul.go
* Update telemetry.mdx
2020-12-03 11:19:08 -08:00
8a5a456fdb
Fix typo about environment variable in docs ( #10259 )
...
The CLI appears to read from `VAULT_CACERT` instead of `VAULT_CA_CERT` as the docs currently say. Basing this off code [here](a8566c4f89/api/client.go (L30)
2020-12-02 16:09:00 -07:00
f6138a98d1
clarify secret revoke during mount disable ( #10483 )
2020-12-02 12:55:47 -05:00
a50cf45b23
corrects a typo in the azure secrets docs ( #10455 )
2020-11-25 12:26:04 -08:00
123b30631d
Added documentation for `vault operator usage`. ( #10432 )
...
Co-authored-by: swayne275 <swayne@hashicorp.com>
2020-11-23 20:10:48 -06:00
b8ba047b35
Allow Vault Agent to run as a Windows service ( #10231 )
2020-11-23 14:24:32 -08:00
9030ec32ef
Telemetry documentation: Lease Expiry Metrics ( #10377 )
...
* telemetry doc update
* upgraded telemetry configuration docs
* review comments update
2020-11-23 11:06:41 -08:00
dad10ddabc
Avoid using "KMS seal" since it causes confusion: some people think that excludes HSMs, and it's not obvious that Transit is a KMS. ( #10414 )
...
Highlight that recovery keys can't be used for recovery when an auto seal is broken (unfortunate name, that.)
2020-11-23 08:59:25 -05:00
87df286a24
Update to list policy & some raft docs ( #10396 )
...
* Update to list policy docs
It seems
(https://github.com/hashicorp/vault/blob/master/http/logical.go#L137 ) we
do not require the trailing slash any more.
Also added notes about go-discover
* Added additional note on quorum
* Added link to remove-peer command
2020-11-20 17:14:28 -05:00
f5973c6dad
Change API token to ACL token ( #10425 )
2020-11-20 11:07:27 -08:00
9ece4acead
remove space which caused formatting weirdness ( #10415 )
2020-11-18 11:08:06 -08:00
d926031159
Add Learn links ( #10411 )
...
* Add Learn links
* Update website/pages/docs/secrets/transform/tokenization.mdx
Co-authored-by: Calvin Leung Huang <cleung2010@gmail.com>
Co-authored-by: Calvin Leung Huang <cleung2010@gmail.com>
2020-11-17 16:56:30 -08:00
69bbecea78
Clarify JWT in kubernetes auth docs ( #10403 )
2020-11-16 16:45:12 -07:00
492ed5b319
Update 'sane' default to say 'reasonable' default ( #10400 )
2020-11-16 14:19:18 -08:00
2cbd4a9e00
Add note about Database engine interface ( #10372 )
2020-11-13 10:44:21 -07:00
ddcb15cef9
Link to transform concepts page in sidebar. ( #10392 )
...
* Link to transform concepts page in sidebar
* ,
2020-11-12 18:04:51 -06:00
17fea5cea9
Add automated raft snapshots to sidebar ( #10387 )
2020-11-12 08:53:23 -08:00
d511cef5df
Added upgrade note about go version ( #10385 )
2020-11-11 18:26:11 -05:00
d17917341c
Transform doc fix ( #10383 )
...
* Add tokenization
* Fixes
2020-11-11 12:54:11 -06:00
3cdad923f4
Add 1.6 Release Notes ( #10378 )
...
* Add 1.6 Release Notes
* Remove usage command
* Apply suggestions from code review
* Website version + CHANGELOG
Co-authored-by: Meggie <meggie@hashicorp.com>
2020-11-11 10:36:23 -05:00
2db96ae7ac
Add upgrade note for Transform ( #10371 )
...
* Add upgrade note for tokenization
* nav
* Just 1.5
* Clarify relationship to API changes
Co-authored-by: Meggie <meggie@hashicorp.com>
2020-11-11 10:33:51 -05:00
c62582e0de
docs: adds documentation for key management secrets engine ( #10353 )
...
Co-authored-by: Clint <catsby@users.noreply.github.com>
Co-authored-by: Yoko <yoko@hashicorp.com>
2020-11-10 09:28:28 -08:00
1b2a198212
More info on when vm params are not needed ( #10362 )
...
* more info on when vm params are not needed
* more updates
2020-11-09 11:49:03 -08:00
dae4bc5fbc
Update azure.mdx ( #10347 )
2020-11-09 11:20:06 -08:00
b6b3ec79ca
Land Tokenization docs ( #10357 )
2020-11-09 10:58:54 -06:00
a361d1299b
Add plugin reload docs to the website sidebar ( #10108 )
2020-11-06 14:13:12 -08:00
48103c71fe
Add autosnapshot docs. ( #10338 )
2020-11-06 15:56:52 -05:00
61c5da6911
Update MongoDB Atlas plugin docs ( #10343 )
...
Root credential rotation not supported as the Vault user uses public/private keys instead of passwords to authenticate.
2020-11-06 19:16:48 +00:00
caf65bfae7
Add new metrics to the telemetry page
2020-11-05 15:05:07 -08:00
fba851dbe9
Update raft.mdx ( #10329 )
2020-11-05 12:33:50 -08:00
e5a6ef2df2
Elipse / triple dots missing in VAULT_TOKEN ( #9929 )
2020-11-05 09:54:26 -08:00
c087f5885b
Bump HSM version ( #10327 )
2020-11-05 12:53:25 -05:00
f742277996
Documentation for client count / activity log API. ( #10315 )
...
* Documentation for client count API.
* New concepts page
Co-authored-by: swayne275 <swayne@hashicorp.com>
2020-11-05 11:47:48 -06:00
10a16574a6
Proposed changelog for the 1.6.0 RC ( #10328 )
...
* changelog++
I wasn't entirely sure what the changelog should look like for the release candidate.
* Updating website version
2020-11-04 18:23:15 -05:00
e32e1e17c7
docs: clarify location of service account key file for google-specific OIDC handling ( #10313 )
2020-11-02 17:45:05 -08:00
8af08c3221
Add an env var to enable a permit pool that limits lease expirations ( #10268 )
...
* Add a flag to enable a permit pool to gate lease expiration
* Use the env var to get the size
* Add logs and metris to help debug this
Co-authored-by: Hridoy Roy <roy@hashicorp.com>
2020-10-30 14:45:44 -07:00
16eb1489d1
Update OIDC namespace_in_state docs ( #10269 )
...
To reflect the default of true for new configs.
2020-10-30 08:15:34 -07:00
81a86f48e8
Backport some OSS changes ( #10267 )
...
* Backport some OSS changes
* go mod vendor
2020-10-29 16:47:34 -07:00
f172eb9477
Docs - examples of IPv6 added in `listener` section of configurations. ( #9601 )
2020-10-29 15:12:18 -04:00
ab5b8bc6bf
Update index.mdx ( #10262 )
2020-10-29 12:04:48 -07:00
f8a248ce48
Port: change leader status metric name to active ( #10245 )
...
* change active node metric name
* comment to see if commit is fine
Co-authored-by: Hridoy Roy <hridoyroy@Hridoys-MacBook-Pro.local>
2020-10-29 10:30:45 -07:00
b7cf4a05ff
Add support for Managed Identity auth for physical/Azure ( #10189 )
...
* Add support for Managed Identity auth for physical/Azure
Obtain OAuth token from IMDS to allow for access to Azure Blob with
short-lived dynamic credentials
Fix #7322
* add tests & update docs/dependencies
2020-10-28 15:04:26 -07:00
a4bcbb84e2
docs: fix k8s helm configuration rendering ( #10257 )
2020-10-28 10:51:40 -04:00
0259be04e0
Port: Add metrics to report mount table sizes for auth and logical [Vault 671] ( #10201 )
...
* first commit
* update
* removed some ent features from backport
* final refactor
* backport patch
Co-authored-by: Hridoy Roy <hridoyroy@Hridoys-MacBook-Pro.local>
Co-authored-by: Hridoy Roy <hridoyroy@Hridoys-MBP.hitronhub.home>
2020-10-27 08:24:43 -07:00
e6807a0645
Docs: Support for scopes in MongoDB Atlas database plugin ( #10241 )
2020-10-27 13:24:51 +00:00
ebfaa551eb
Add ability to specify region for OCI Storage Backend ( #9302 )
...
* Add ability to specify region for OCI Storage Backend
* Fix capitalization in Vault documentation
Co-authored-by: Josh Black <raskchanky@users.noreply.github.com>
Co-authored-by: Vishal Nayak <vishalnayak@users.noreply.github.com>
2020-10-26 18:28:32 -04:00
d8dc45f03f
UI/OIDC: allow passing namespace in state ( #10171 )
...
* UI/OIDC: allow passing namespace in state
Suppport in the UI OIDC callback flow to parse namespace out of the
state parameter instead of a separate query parameter in the
redirect_uri. Includes docs for the option that enables this behavior
in the JWT plugin.
* 1.6 wordsmithing
* pass_namespace_in_state -> namespace_in_state
* re-wording
* use strict equals
Co-authored-by: Vishal Nayak <vishalnayak@users.noreply.github.com>
2020-10-26 18:17:21 -04:00
Scott Miller