Commit graph

23092 commits

Author SHA1 Message Date
dependabot[bot]
2f5400a1dd
Bump github.com/docker/cli
Bumps [github.com/docker/cli](https://github.com/docker/cli) from 27.4.1+incompatible to 29.2.0+incompatible.
- [Commits](https://github.com/docker/cli/compare/v27.4.1...v29.2.0)

---
updated-dependencies:
- dependency-name: github.com/docker/cli
  dependency-version: 29.2.0+incompatible
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-04-02 22:10:29 +00:00
hc-github-team-secure-vault-core
54d6d84268 Merge remote-tracking branch 'remotes/from/ce/main'
Some checks are pending
build / setup (push) Waiting to run
build / Check ce/* Pull Requests (push) Blocked by required conditions
build / ui (push) Blocked by required conditions
build / artifacts-ce (push) Blocked by required conditions
build / artifacts-ent (push) Blocked by required conditions
build / hcp-setup (push) Waiting to run
build / hcp-image (push) Blocked by required conditions
build / test (push) Blocked by required conditions
build / test-hcp-image (push) Blocked by required conditions
build / completed-successfully (push) Blocked by required conditions
CI / setup (push) Waiting to run
CI / Run Autopilot upgrade tool (push) Blocked by required conditions
CI / Run Go tests (push) Blocked by required conditions
CI / Run Go tests tagged with testonly (push) Blocked by required conditions
CI / Run Go tests with data race detection (push) Blocked by required conditions
CI / Run Go tests with FIPS configuration (push) Blocked by required conditions
CI / Test UI (push) Blocked by required conditions
CI / tests-completed (push) Blocked by required conditions
Run linters / Setup (push) Waiting to run
Run linters / Deprecated functions (push) Blocked by required conditions
Run linters / Code checks (push) Blocked by required conditions
Run linters / Protobuf generate delta (push) Blocked by required conditions
Run linters / Format (push) Blocked by required conditions
Run linters / Semgrep (push) Waiting to run
Check Copywrite Headers / copywrite (push) Waiting to run
Security Scan / scan (push) Waiting to run
2026-04-02 22:08:26 +00:00
Ryan Cragun
fd76450cd8
go: use github.com/cloudflare/circl@v1.6.3 (#13598)
We had upgraded to this version previously[0] but it seems we accidentally
reverted backward[1].

[0]:https://github.com/hashicorp/vault-enterprise/pull/12651/changes#diff-33ef32bf6c23acb95f5902d7097b7a1d5128ca061167ec0716715b0b9eeaa5f6L342
[1]:https://github.com/hashicorp/vault-enterprise/pull/13244

Signed-off-by: Ryan Cragun <me@ryan.ec>
2026-04-02 21:17:09 +00:00
Vault Automation
9fec846a5e
bump version to 3.0.0-beta1 (#13580) (#13582)
Signed-off-by: Ryan Cragun <me@ryan.ec>
Co-authored-by: Ryan Cragun <me@ryan.ec>
2026-04-02 15:10:40 -06:00
hc-github-team-secure-vault-core
dcb17c0805 Merge remote-tracking branch 'remotes/from/ce/main'
Some checks are pending
build / setup (push) Waiting to run
build / Check ce/* Pull Requests (push) Blocked by required conditions
build / ui (push) Blocked by required conditions
build / artifacts-ce (push) Blocked by required conditions
build / artifacts-ent (push) Blocked by required conditions
build / hcp-setup (push) Waiting to run
build / hcp-image (push) Blocked by required conditions
build / test (push) Blocked by required conditions
build / test-hcp-image (push) Blocked by required conditions
build / completed-successfully (push) Blocked by required conditions
CI / setup (push) Waiting to run
CI / Run Autopilot upgrade tool (push) Blocked by required conditions
CI / Run Go tests (push) Blocked by required conditions
CI / Run Go tests tagged with testonly (push) Blocked by required conditions
CI / Run Go tests with data race detection (push) Blocked by required conditions
CI / Run Go tests with FIPS configuration (push) Blocked by required conditions
CI / Test UI (push) Blocked by required conditions
CI / tests-completed (push) Blocked by required conditions
Run linters / Setup (push) Waiting to run
Run linters / Deprecated functions (push) Blocked by required conditions
Run linters / Code checks (push) Blocked by required conditions
Run linters / Protobuf generate delta (push) Blocked by required conditions
Run linters / Format (push) Blocked by required conditions
Run linters / Semgrep (push) Waiting to run
Check Copywrite Headers / copywrite (push) Waiting to run
Security Scan / scan (push) Waiting to run
2026-04-02 18:13:03 +00:00
Vault Automation
a23dc5c0e0
[VAULT-43618] sdk: migrate from github.com/docker/docker to github.com/moby/moby
Resolve GHSA-x744-4wpc-v9h2 and GHSA-pxq6-2prw-chj9 in `vault` by replacing
`github.com/docker/docker` with `github.com/moby/moby/client` @ `v0.3.0` and
`github.com/moby/moby/api` @ `v1.54.0`. This is necessary as `docker/docker`
 is no longer maintained and the fixes are not available in it.

Resolve GO-2026-4518, GHSA-x6gf-mpr2-68h6 and GHSA-jqcq-xjh3-6g23 by
upgrading to github.com/jackc/pgx/v5. This is necessary as v4 is not
longer maitained.

Signed-off-by: Ryan Cragun <me@ryan.ec>
Co-authored-by: Ryan Cragun <me@ryan.ec>
2026-04-02 13:58:05 -04:00
hc-github-team-secure-vault-core
f63543cd91 Merge remote-tracking branch 'remotes/from/ce/main' 2026-04-02 16:17:27 +00:00
Vault Automation
9a6d507dec
[UI] [VAULT-42855]: billing overview poc (#12548) (#13556)
* Create billing route and add to sidebar

* WIP

* Working dynamic cards

* Update billing copy

* Fix bugs

* WIP polling

* WIP Add polling..

* Move card logic to metric-card

* Remove gcp KMS

* Working polling

* broken but just to demo normalization (#12594)

* broken but just to demo normalization

* Pair with Claire to clean up data

* Fix merge conflict issue

* Create type file and add helper

* Add unit test!

* Add copywright headers

* Update unit test name

---------



* Fixes summary card component

* Polling...

* Fix ts errors

* Write sidebar logic and add acceptance test

* Add comment explaining license feature

* Address feedback and fix styling so its responsive

* Fix failing tests

* Remove polling service and code clean up

* Add changelog and update some styling!

* Update changelog...

---------

Co-authored-by: Kianna <30884335+kiannaquach@users.noreply.github.com>
Co-authored-by: claire bontempo <68122737+hellobontempo@users.noreply.github.com>
2026-04-02 09:15:34 -07:00
hc-github-team-secure-vault-core
65dc1a41e0 Merge remote-tracking branch 'remotes/from/ce/main'
Some checks are pending
build / setup (push) Waiting to run
build / Check ce/* Pull Requests (push) Blocked by required conditions
build / ui (push) Blocked by required conditions
build / artifacts-ce (push) Blocked by required conditions
build / artifacts-ent (push) Blocked by required conditions
build / hcp-setup (push) Waiting to run
build / hcp-image (push) Blocked by required conditions
build / test (push) Blocked by required conditions
build / test-hcp-image (push) Blocked by required conditions
build / completed-successfully (push) Blocked by required conditions
CI / setup (push) Waiting to run
CI / Run Autopilot upgrade tool (push) Blocked by required conditions
CI / Run Go tests (push) Blocked by required conditions
CI / Run Go tests tagged with testonly (push) Blocked by required conditions
CI / Run Go tests with data race detection (push) Blocked by required conditions
CI / Run Go tests with FIPS configuration (push) Blocked by required conditions
CI / Test UI (push) Blocked by required conditions
CI / tests-completed (push) Blocked by required conditions
Run linters / Setup (push) Waiting to run
Run linters / Deprecated functions (push) Blocked by required conditions
Run linters / Code checks (push) Blocked by required conditions
Run linters / Protobuf generate delta (push) Blocked by required conditions
Run linters / Format (push) Blocked by required conditions
Run linters / Semgrep (push) Waiting to run
Check Copywrite Headers / copywrite (push) Waiting to run
Security Scan / scan (push) Waiting to run
2026-04-01 17:17:38 +00:00
Vault Automation
d91bb23921
VAULT-43165: Fix exterprise token JIT error propagation (#13375) (#13479)
* Fix exterprise token error propagation
2026-04-01 19:13:46 +02:00
Vault Automation
bcda5f99b5
update header spacing (#13505) (#13561)
Co-authored-by: lane-wetmore <lane.wetmore@hashicorp.com>
2026-04-01 12:10:06 -05:00
hc-github-team-secure-vault-core
bb5ed03b4c Merge remote-tracking branch 'remotes/from/ce/main'
Some checks are pending
build / setup (push) Waiting to run
build / Check ce/* Pull Requests (push) Blocked by required conditions
build / ui (push) Blocked by required conditions
build / artifacts-ce (push) Blocked by required conditions
build / artifacts-ent (push) Blocked by required conditions
build / hcp-setup (push) Waiting to run
build / hcp-image (push) Blocked by required conditions
build / test (push) Blocked by required conditions
build / test-hcp-image (push) Blocked by required conditions
build / completed-successfully (push) Blocked by required conditions
CI / setup (push) Waiting to run
CI / Run Autopilot upgrade tool (push) Blocked by required conditions
CI / Run Go tests (push) Blocked by required conditions
CI / Run Go tests tagged with testonly (push) Blocked by required conditions
CI / Run Go tests with data race detection (push) Blocked by required conditions
CI / Run Go tests with FIPS configuration (push) Blocked by required conditions
CI / Test UI (push) Blocked by required conditions
CI / tests-completed (push) Blocked by required conditions
Run linters / Setup (push) Waiting to run
Run linters / Deprecated functions (push) Blocked by required conditions
Run linters / Code checks (push) Blocked by required conditions
Run linters / Protobuf generate delta (push) Blocked by required conditions
Run linters / Format (push) Blocked by required conditions
Run linters / Semgrep (push) Waiting to run
Check Copywrite Headers / copywrite (push) Waiting to run
Security Scan / scan (push) Waiting to run
2026-04-01 00:08:46 +00:00
Vault Automation
c92b6160a8
[UI][VAULT-42692]Add entities and groups playwright tests (#13424) (#13447)
* Add entities and groups playwright tests

* Fixes some failing playwright tests

* Add comment

* Create policy in test and use that instead

Co-authored-by: Kianna <30884335+kiannaquach@users.noreply.github.com>
2026-03-31 16:43:22 -07:00
Vault Automation
7bfe23085a
add playwright test coverage for MFA login enforcement (#13060) (#13078)
Co-authored-by: lane-wetmore <lane.wetmore@hashicorp.com>
2026-03-31 16:18:44 -07:00
hc-github-team-secure-vault-core
ec3496213b Merge remote-tracking branch 'remotes/from/ce/main'
Some checks failed
build / setup (push) Has been cancelled
build / hcp-setup (push) Has been cancelled
CI / setup (push) Has been cancelled
Run linters / Setup (push) Has been cancelled
Run linters / Semgrep (push) Has been cancelled
Check Copywrite Headers / copywrite (push) Has been cancelled
Security Scan / scan (push) Has been cancelled
build / Check ce/* Pull Requests (push) Has been cancelled
build / ui (push) Has been cancelled
build / artifacts-ce (push) Has been cancelled
build / artifacts-ent (push) Has been cancelled
build / hcp-image (push) Has been cancelled
build / test (push) Has been cancelled
build / test-hcp-image (push) Has been cancelled
build / completed-successfully (push) Has been cancelled
CI / Run Autopilot upgrade tool (push) Has been cancelled
CI / Run Go tests (push) Has been cancelled
CI / Run Go tests tagged with testonly (push) Has been cancelled
CI / Run Go tests with data race detection (push) Has been cancelled
CI / Run Go tests with FIPS configuration (push) Has been cancelled
CI / Test UI (push) Has been cancelled
CI / tests-completed (push) Has been cancelled
Run linters / Deprecated functions (push) Has been cancelled
Run linters / Code checks (push) Has been cancelled
Run linters / Protobuf generate delta (push) Has been cancelled
Run linters / Format (push) Has been cancelled
2026-03-30 16:19:10 +00:00
Vault Automation
88aa07c041
(enos) Improve Blackbox SDK Filtering and Test Organization (#13350) (#13490)
* reorganize the blackbox structure

* mend

* organize by directories

* respond to feedback:

* Formatting

* whitespace

* default testnames

* local

* nullcheck

Co-authored-by: Luis (LT) Carbonell <lt.carbonell@hashicorp.com>
2026-03-30 09:09:53 -07:00
hc-github-team-secure-vault-core
65a714d7cb Merge remote-tracking branch 'remotes/from/ce/main'
Some checks failed
build / setup (push) Has been cancelled
build / hcp-setup (push) Has been cancelled
CI / setup (push) Has been cancelled
Run linters / Setup (push) Has been cancelled
Run linters / Semgrep (push) Has been cancelled
Check Copywrite Headers / copywrite (push) Has been cancelled
Security Scan / scan (push) Has been cancelled
build / Check ce/* Pull Requests (push) Has been cancelled
build / ui (push) Has been cancelled
build / artifacts-ce (push) Has been cancelled
build / artifacts-ent (push) Has been cancelled
build / hcp-image (push) Has been cancelled
build / test (push) Has been cancelled
build / test-hcp-image (push) Has been cancelled
build / completed-successfully (push) Has been cancelled
CI / Run Autopilot upgrade tool (push) Has been cancelled
CI / Run Go tests (push) Has been cancelled
CI / Run Go tests tagged with testonly (push) Has been cancelled
CI / Run Go tests with data race detection (push) Has been cancelled
CI / Run Go tests with FIPS configuration (push) Has been cancelled
CI / Test UI (push) Has been cancelled
CI / tests-completed (push) Has been cancelled
Run linters / Deprecated functions (push) Has been cancelled
Run linters / Code checks (push) Has been cancelled
Run linters / Protobuf generate delta (push) Has been cancelled
Run linters / Format (push) Has been cancelled
2026-03-27 16:15:32 +00:00
Vault Automation
13eff8cf56
auto: bumps vault-client-typescript version (#13252) (#13308)
Co-authored-by: Angelo Cordon <angelo.cordon@hashicorp.com>
2026-03-27 08:45:42 -07:00
Vault Automation
b14431e63f
VAULT-43198 [2/7] JWT sys backend: Unit tests (#12875) (#13440)
* feat: move JWT auth config from HCL to sys/config/oauth-resource-server endpoint

* test(jwt): add unit and storage tests for JwtAuthManager and sys endpoint

* refactor: move oauth-resource-server paths from CE to ent file

Path definitions for sys/config/oauth-resource-server belong in
logical_system_paths_ent.go (ent-only), not logical_system_paths.go
(shared CE file). Move them into a new oAuthResourceServerPaths()
function registered via the ent init() hook.

* fix logical system paths

* fix logical system paths (2)

* respect the user claim in oauth profile

* review comments

* feat(jwt): add oauth-resource-server activation flag and bugfix

* refactor(jwt): rewrite JWT engine and expiration handling

* feat(jwt): add sys backend paths and remove HCL config

* fix(test): update activation flags tests for oauth-resource-server

* fix(test): skip outdated jwt test in logical_ent_test.go

* fixes for broken tests (4)

* add activation flag tests

* moving out request handling changes

* fix linter errors

* merge

* cleanup comments and names

* cosmetic var name cleanup

* update from main

* add tests

* avoid sleep

* review comments

* review comments

* review comments

* review comments

* review comments

Co-authored-by: Arnab Chatterjee <arnab.chatterjee@hashicorp.com>
2026-03-27 15:24:12 +00:00
hc-github-team-secure-vault-core
2d75a9e34f Merge remote-tracking branch 'remotes/from/ce/main'
Some checks are pending
build / setup (push) Waiting to run
build / Check ce/* Pull Requests (push) Blocked by required conditions
build / ui (push) Blocked by required conditions
build / artifacts-ce (push) Blocked by required conditions
build / artifacts-ent (push) Blocked by required conditions
build / hcp-setup (push) Waiting to run
build / hcp-image (push) Blocked by required conditions
build / test (push) Blocked by required conditions
build / test-hcp-image (push) Blocked by required conditions
build / completed-successfully (push) Blocked by required conditions
CI / setup (push) Waiting to run
CI / Run Autopilot upgrade tool (push) Blocked by required conditions
CI / Run Go tests (push) Blocked by required conditions
CI / Run Go tests tagged with testonly (push) Blocked by required conditions
CI / Run Go tests with data race detection (push) Blocked by required conditions
CI / Run Go tests with FIPS configuration (push) Blocked by required conditions
CI / Test UI (push) Blocked by required conditions
CI / tests-completed (push) Blocked by required conditions
Run linters / Setup (push) Waiting to run
Run linters / Deprecated functions (push) Blocked by required conditions
Run linters / Code checks (push) Blocked by required conditions
Run linters / Protobuf generate delta (push) Blocked by required conditions
Run linters / Format (push) Blocked by required conditions
Run linters / Semgrep (push) Waiting to run
Check Copywrite Headers / copywrite (push) Waiting to run
Security Scan / scan (push) Waiting to run
2026-03-27 07:24:48 +00:00
Vault Automation
8a381d197c
VAULT-43179 - Add txnMutex to serialize MemDB transactions and fix race condition (#13336) (#13475)
* Add txnMutex to serialize MemDB transactions and fix race condition

* Added changelog

* Added tests

* Code cleanup

Co-authored-by: santoshhashicorp <santosh.yelamarthi@hashicorp.com>
2026-03-27 12:42:53 +05:30
hc-github-team-secure-vault-core
b30093e59d Merge remote-tracking branch 'remotes/from/ce/main' 2026-03-27 04:55:37 +00:00
Vault Automation
b301682d0a
[UI] VAULT-43361 leases playwright (#13290) (#13468)
* Add leases tests!

* Remove steps

Co-authored-by: Kianna <30884335+kiannaquach@users.noreply.github.com>
2026-03-26 21:01:09 -07:00
hc-github-team-secure-vault-core
ce414b038d Merge remote-tracking branch 'remotes/from/ce/main'
Some checks are pending
build / setup (push) Waiting to run
build / Check ce/* Pull Requests (push) Blocked by required conditions
build / ui (push) Blocked by required conditions
build / artifacts-ce (push) Blocked by required conditions
build / artifacts-ent (push) Blocked by required conditions
build / hcp-setup (push) Waiting to run
build / hcp-image (push) Blocked by required conditions
build / test (push) Blocked by required conditions
build / test-hcp-image (push) Blocked by required conditions
build / completed-successfully (push) Blocked by required conditions
CI / setup (push) Waiting to run
CI / Run Autopilot upgrade tool (push) Blocked by required conditions
CI / Run Go tests (push) Blocked by required conditions
CI / Run Go tests tagged with testonly (push) Blocked by required conditions
CI / Run Go tests with data race detection (push) Blocked by required conditions
CI / Run Go tests with FIPS configuration (push) Blocked by required conditions
CI / Test UI (push) Blocked by required conditions
CI / tests-completed (push) Blocked by required conditions
Run linters / Setup (push) Waiting to run
Run linters / Deprecated functions (push) Blocked by required conditions
Run linters / Code checks (push) Blocked by required conditions
Run linters / Protobuf generate delta (push) Blocked by required conditions
Run linters / Format (push) Blocked by required conditions
Run linters / Semgrep (push) Waiting to run
Check Copywrite Headers / copywrite (push) Waiting to run
Security Scan / scan (push) Waiting to run
2026-03-26 23:05:53 +00:00
Vault Automation
0550cb4846
[VAULT-40236] IBM license integration changelog (#13281) (#13460)
* add changelog

* add more release notes

* change file name

* separate telemetry metric

Co-authored-by: Jenny Deng <jenny.deng@hashicorp.com>
2026-03-26 15:46:18 -07:00
hc-github-team-secure-vault-core
e34fce692a Merge remote-tracking branch 'remotes/from/ce/main' 2026-03-26 21:07:48 +00:00
Vault Automation
6e78ee6a61
UI: fix bug when mounting external kv version & empty payload when tuning external versions (#13361) (#13450)
* default to version 1 when options is returned empty for external kv  mounts

* updating checks for kv, tuning version after mount, reloading plugin after tuning verision

* fix comment

* moved array to const

Co-authored-by: Dan Rivera <dan.rivera@hashicorp.com>
2026-03-26 16:58:42 -04:00
Vault Automation
51c873051a
Fix occasional error within pki.TestParseCertificate/full_non_CA_cert/full_non_CA_cert_fields (#13399) (#13429)
* Fix occasional error within pki.TestParseCertificate/full_non_CA_cert/full_non_CA_cert_fields

* Drop length matching in regex and parse hex comparing as big int against certificate

Co-authored-by: Steven Clark <steven.clark@hashicorp.com>
2026-03-26 13:32:07 -07:00
hc-github-team-secure-vault-core
9e1caa162e Merge remote-tracking branch 'remotes/from/ce/main' 2026-03-26 20:07:34 +00:00
Vault Automation
673def4f59
[UI][VAULT-42957] Namespace wizard playwright tests (#13289) (#13324)
* wip namespace wizard test

* Namespaces wizard first step

* Add more namespace step 2 tests

* Modified namespace wizard tests!

* Remove namespace wizard tests

Co-authored-by: Kianna <30884335+kiannaquach@users.noreply.github.com>
2026-03-26 12:50:34 -07:00
hc-github-team-secure-vault-core
ca32e6fef3 Merge remote-tracking branch 'remotes/from/ce/main' 2026-03-26 19:23:53 +00:00
Vault Automation
45530c0d48
[UI] Dismiss Wizards in Ember Tests (#13407) (#13442)
* dismisses wizards in ember tests

* clears localStorage for tests that require intro pages

* fixes version assertions in reduced disclosure tests

* adds a wait for file upload in snapshots recovery test

Co-authored-by: Jordan Reimer <zofskeez@gmail.com>
2026-03-26 18:21:01 +00:00
hc-github-team-secure-vault-core
a5b04161e9 Merge remote-tracking branch 'remotes/from/ce/main' 2026-03-26 18:16:19 +00:00
Vault Automation
f7a1a4e825
Fix TestPki_MultipleOUs failing on slow machines (#13390) (#13435)
Co-authored-by: Steven Clark <steven.clark@hashicorp.com>
2026-03-26 17:56:19 +00:00
hc-github-team-secure-vault-core
d3178714db Merge remote-tracking branch 'remotes/from/ce/main'
Some checks are pending
build / setup (push) Waiting to run
build / Check ce/* Pull Requests (push) Blocked by required conditions
build / ui (push) Blocked by required conditions
build / artifacts-ce (push) Blocked by required conditions
build / artifacts-ent (push) Blocked by required conditions
build / hcp-setup (push) Waiting to run
build / hcp-image (push) Blocked by required conditions
build / test (push) Blocked by required conditions
build / test-hcp-image (push) Blocked by required conditions
build / completed-successfully (push) Blocked by required conditions
CI / setup (push) Waiting to run
CI / Run Autopilot upgrade tool (push) Blocked by required conditions
CI / Run Go tests (push) Blocked by required conditions
CI / Run Go tests tagged with testonly (push) Blocked by required conditions
CI / Run Go tests with data race detection (push) Blocked by required conditions
CI / Run Go tests with FIPS configuration (push) Blocked by required conditions
CI / Test UI (push) Blocked by required conditions
CI / tests-completed (push) Blocked by required conditions
Run linters / Setup (push) Waiting to run
Run linters / Deprecated functions (push) Blocked by required conditions
Run linters / Code checks (push) Blocked by required conditions
Run linters / Protobuf generate delta (push) Blocked by required conditions
Run linters / Format (push) Blocked by required conditions
Run linters / Semgrep (push) Waiting to run
Check Copywrite Headers / copywrite (push) Waiting to run
Security Scan / scan (push) Waiting to run
2026-03-26 16:22:59 +00:00
Vault Automation
a6f04b6f46
Add parsed fields from integration certificate issuance response to t… (#12790) (#12944)
* Add parsed fields from integration certificate issuance response to the response audit logs.

* Add changelog.

* Return signature error-fix.

* Fix nil-error.

* Pull-Request Review Updates.

* EST and CMPv2 audit logging tests, and noopAudit setup for SCEP testing.

* Fix Audit Tests.

* Fix serial-number parsing in template parser.

* Go mod tidy

* Circular dependency issue.

* Fix test to allow parsing serial_number

Co-authored-by: Kit Haines <khaines@mit.edu>
2026-03-26 12:00:16 -04:00
Blake Ryder
610f0e6a21
Update LICENSE (#31826)
Some checks are pending
build / setup (push) Waiting to run
build / Check ce/* Pull Requests (push) Blocked by required conditions
build / ui (push) Blocked by required conditions
build / artifacts-ce (push) Blocked by required conditions
build / artifacts-ent (push) Blocked by required conditions
build / hcp-setup (push) Waiting to run
build / hcp-image (push) Blocked by required conditions
build / test (push) Blocked by required conditions
build / test-hcp-image (push) Blocked by required conditions
build / completed-successfully (push) Blocked by required conditions
CI / setup (push) Waiting to run
CI / Run Autopilot upgrade tool (push) Blocked by required conditions
CI / Run Go tests (push) Blocked by required conditions
CI / Run Go tests tagged with testonly (push) Blocked by required conditions
CI / Run Go tests with data race detection (push) Blocked by required conditions
CI / Run Go tests with FIPS configuration (push) Blocked by required conditions
CI / Test UI (push) Blocked by required conditions
CI / tests-completed (push) Blocked by required conditions
Run linters / Setup (push) Waiting to run
Run linters / Deprecated functions (push) Blocked by required conditions
Run linters / Code checks (push) Blocked by required conditions
Run linters / Protobuf generate delta (push) Blocked by required conditions
Run linters / Format (push) Blocked by required conditions
Run linters / Semgrep (push) Waiting to run
Check Copywrite Headers / copywrite (push) Waiting to run
Security Scan / scan (push) Waiting to run
No source code changes, only License File updates are getting merged.
2026-03-26 11:04:59 +05:30
hc-github-team-secure-vault-core
bb5bb787c3 Merge remote-tracking branch 'remotes/from/ce/main' 2026-03-26 03:37:40 +00:00
Vault Automation
ef4609e2a4
pipeline(metadata): fix ce_in_enterprise detection (#13408) (#13414)
Support detecting short or long base refs

Signed-off-by: Ryan Cragun <me@ryan.ec>
Co-authored-by: Ryan Cragun <me@ryan.ec>
2026-03-25 21:30:54 -06:00
hc-github-team-secure-vault-core
027a83e318 Merge remote-tracking branch 'remotes/from/ce/main' 2026-03-26 01:31:53 +00:00
Vault Automation
42096bfab0
release: add 2.x.x to versions.hcl (#13406) (#13409)
Signed-off-by: Ryan Cragun <me@ryan.ec>
Co-authored-by: Ryan Cragun <me@ryan.ec>
2026-03-25 18:40:54 -06:00
hc-github-team-secure-vault-core
2468b4afc9 Merge remote-tracking branch 'remotes/from/ce/main'
Some checks are pending
build / setup (push) Waiting to run
build / Check ce/* Pull Requests (push) Blocked by required conditions
build / ui (push) Blocked by required conditions
build / artifacts-ce (push) Blocked by required conditions
build / artifacts-ent (push) Blocked by required conditions
build / hcp-setup (push) Waiting to run
build / hcp-image (push) Blocked by required conditions
build / test (push) Blocked by required conditions
build / test-hcp-image (push) Blocked by required conditions
build / completed-successfully (push) Blocked by required conditions
CI / setup (push) Waiting to run
CI / Run Autopilot upgrade tool (push) Blocked by required conditions
CI / Run Go tests (push) Blocked by required conditions
CI / Run Go tests tagged with testonly (push) Blocked by required conditions
CI / Run Go tests with data race detection (push) Blocked by required conditions
CI / Run Go tests with FIPS configuration (push) Blocked by required conditions
CI / Test UI (push) Blocked by required conditions
CI / tests-completed (push) Blocked by required conditions
Run linters / Setup (push) Waiting to run
Run linters / Deprecated functions (push) Blocked by required conditions
Run linters / Code checks (push) Blocked by required conditions
Run linters / Protobuf generate delta (push) Blocked by required conditions
Run linters / Format (push) Blocked by required conditions
Run linters / Semgrep (push) Waiting to run
Check Copywrite Headers / copywrite (push) Waiting to run
Security Scan / scan (push) Waiting to run
2026-03-25 20:09:09 +00:00
Vault Automation
23d04b2efd
version: bump version to 2.0.0-beta1 (#13100) (#13388)
* version: bump version to 2.0.0-beta1

Signed-off-by: Ryan Cragun <me@ryan.ec>
Co-authored-by: Ryan Cragun <me@ryan.ec>
2026-03-25 19:49:08 +00:00
hc-github-team-secure-vault-core
f113e9df0a Merge remote-tracking branch 'remotes/from/ce/main' 2026-03-25 19:16:52 +00:00
Vault Automation
13c7838ab3
Backport [VAULT-42245] Add IBM license update to enos upgrade scenario into ce/main (#13165)
* [VAULT-42245] Add IBM license update to enos upgrade scenario (#12661)

* initial changes

* more changes

* test

* test changes

* Fix test

* try ignoring customer id

* clean up

* more clean up

* lint

* PR comments

* make edition a variable

* lint

* PR comments

* add default for customer id

* fix script and lint

* specify license file

* Apply suggestion from @ryancragun

Co-authored-by: Ryan Cragun <me@ryan.ec>

* always configure ibm license

* Update enos/modules/verify_log_secrets/main.tf

Co-authored-by: Ryan Cragun <me@ryan.ec>

* lint

---------

Co-authored-by: Ryan Cragun <me@ryan.ec>

* lint

---------

Co-authored-by: Jenny Deng <jenny.deng@hashicorp.com>
Co-authored-by: Ryan Cragun <me@ryan.ec>
2026-03-25 12:04:01 -07:00
Vault Automation
a506ee6974
Verify LDAP Readiness (#12986) (#13392)
* Verify LDAP Readiness

* require eventually

* public test of ldap server

* touchups

Co-authored-by: Luis (LT) Carbonell <lt.carbonell@hashicorp.com>
2026-03-25 14:50:02 -04:00
Vault Automation
773f056792
Backport [VAULT-43364] pipeline: add template generation support into ce/main
* [VAULT-43364] pipeline: add template generation support

Add a new `template` to the `pipeline generate` command tree. It allows
rendering Go text templates with pipeline requests available via context
functions. The new system is now product agnostic and can be used to
generate any template we wish. This will supersede the enos specific
configuration command.

We also add support for multiple cadences when fetching the list of
release versions. Previously it was assumed that we followed a minor
version bump cadence when fetching versions with an n-minus style lower
bound. Now we can specify the major or minor cadence. To support a
migration from one cadence to another you can also specify an prior
cadence and the version at which the transition happened. This allows
the n-3 reverse traversal to drop into the prior cadence if/when
necessary.

**Template Rendering System**
- New `pipeline generate template` command renders Go templates with
  pipeline data access
- Supports stdin/stdout or file-based input/output
- Templates access version data via function calls rather than
  pre-populated context

**Version Cadence Support**
- Added `VersionCadence` type with `minor` and `major` release cadence
  tracking
- Supports cadence transitions (e.g., minor→major) with
  `TransitionVersion` and `PriorCadence` fields
- Calculates version ranges respecting different release cadences

**Template Functions**
- `VersionsNMinus` / `VersionsBounded` - List versions with explicit
  cadence parameter
- `VersionsNMinusTransition` / `VersionsBoundedTransition` - Handle
  cadence transitions
- `ParseVersion`, `CompareVersions`, `FilterVersions` - Version
  utilities
- All functions require cadence to be explicitly specified

**CLI Integration**
- `--version` and `--edition` flags expose current version/edition to
  templates
- Templates reference these via `.Version` and `.Edition` context fields

**Enos Migration**
- Converted `enos-dynamic-config.hcl` to template-based generation
- Uses `VersionsNMinusTransition` to handle Vault's minor→major cadence
  shift at 1.21.5

Signed-off-by: Ryan Cragun <me@ryan.ec>
Co-authored-by: Ryan Cragun <me@ryan.ec>
2026-03-25 14:41:11 -04:00
hc-github-team-secure-vault-core
9c5d1a5cc6 Merge remote-tracking branch 'remotes/from/ce/main' 2026-03-25 18:15:40 +00:00
Vault Automation
6d5e4c863b
Backport enos(ldap): always verify base DN connection before setup into ce/main
Refactor our connection checking into a new LDAP module that is capable
of running a search and waiting for success. We now call this module
while setting up the integration host and before enabling the LDAP
secrets engine.

We also fix two race conditions in the Agent and HA Seal scenarios where
we might attempt to verify and/or test LDAP before the integration host
has been set up.

Signed-off-by: Ryan Cragun <me@ryan.ec>
Co-authored-by: Ryan Cragun <me@ryan.ec>
Co-authored-by: LT Carbonell <lt.carbonell@hashicorp.com>
2026-03-25 13:34:17 -04:00
hc-github-team-secure-vault-core
b19b1a0e30 Merge remote-tracking branch 'remotes/from/ce/main' 2026-03-25 16:23:01 +00:00