Commit graph

22055 commits

Author SHA1 Message Date
Vault Automation
6c2f2a84ee
VAULT-40506: Disable custom JSON limit parsing on ClusterListener (#10848) (#11075)
* add test for issue

* add bool to disable json limit parsing

* clean up tests

* fix godoc

* restore previous clustering setup

* add nil check for VaultNodeConfig

* add changelog

* move docker test to appropriate directory to allow testing in CI

---------

Co-authored-by: davidadeleon <56207066+davidadeleon@users.noreply.github.com>
Co-authored-by: davidadeleon <ddeleon@hashicorp.com>
2025-12-12 17:23:36 -05:00
Vault Automation
b03ed9cf7f
Fix panic during secondary enablement (#11289) (#11291) 2025-12-12 21:23:40 +00:00
Vault Automation
0a52566ccc
Correct misleading godoc re DisplayAttrs.Value. (#11189) (#11227) 2025-12-12 21:00:07 +00:00
Violet Hynes
ff1d4da453
Manual CE backport VAULT-41128 ensure alias name is not logged in observations (#11296) (#11300)
* VAULT-41128 ensure alias name is not logged in observations (#11296)

* VAULT-41128 ensure alias name is not logged in observations

* feedback

* whoops
2025-12-12 20:25:20 +00:00
Vault Automation
be193ec3ab
VAULT-41147 add policy observations to Vault (#11205) (#11229)
Co-authored-by: Violet Hynes <violet.hynes@hashicorp.com>
2025-12-12 20:24:41 +00:00
Vault Automation
fbbb559ca6
VAULT-41153 correct emission of token create observations (#11302) (#11312)
* VAULT-41153 correct emission of token create observations

* make fmt

* mount info

Co-authored-by: Violet Hynes <violet.hynes@hashicorp.com>
2025-12-12 20:19:04 +00:00
Vault Automation
1934f2698c
UI: Updating non-ember engines to utilize new config tune flow (#10853) (#11236)
* removing flags

* small changes

* fixes

* move things back

* utilizing aftermodel w mods, testing aws

* fix ssh tests

* fixing aws and azure

* fix gcp

* fix test and flip kv

* fix kv2 tests

* adding model to fix tests

* updates and removals

* fix tests

* no showing empty state, redirect to plugin settings after config save

* test fixes

* update subtitle to include namepsace, fix test

* removing index, replacing with general settings, updates

* updates and fix tests

* more test fixes

* wif tests

* updates to nav tests

* update tests and cleanup configuration logic

* add todos

* fix remaining tests, add nav test to gcp

* test tweak

* address todos, test update

* Update ui/app/routes/vault/cluster/secrets/backend/configuration/plugin-settings.ts



* I love prettier so much

---------

Co-authored-by: Dan Rivera <dan.rivera@hashicorp.com>
Co-authored-by: claire bontempo <cbontempo@hashicorp.com>
Co-authored-by: Shannon Roberts (Beagin) <beagins@users.noreply.github.com>
2025-12-12 11:23:32 -08:00
Vault Automation
be2cb06f8c
Backport refactor dependencies and removes disallowed vault imports from builtin Okta auth into ce/main (#11295)
* refactor dependencies and removes disallowed vault imports from builtin Okta auth (#10965)

* move SkipUnlessEnvVarsSet from vault/helper/testhelpers/ to vault/sdk/helper/testhelpers

* use unittest framework from vault-testing-stepwise module in place of sdk/logical

* refactor SkipUnlessEnvVarsSet() and NewAssertAuthPoliciesFunc() to sdk

* bump docker API version to 1.44 matching 2f33549

---------

Co-authored-by: Thy Ton <maithytonn@gmail.com>
2025-12-12 13:20:57 -06:00
Vault Automation
50c9fd55e5
Workaround backport for docker 29 ce main (#11177)
Co-authored-by: LT Carbonell <lt.carbonell@hashicorp.com>
2025-12-12 19:13:57 +00:00
Vault Automation
06068fb8eb
removes ember data models, adapaters and serializers for sync (#11026) (#11195)
Co-authored-by: Jordan Reimer <zofskeez@gmail.com>
2025-12-12 11:00:10 -07:00
Vault Automation
c5b3edc0e4
UI: Add general wizard component (#11136) (#11252)
* add general wizard component

* add copyright headers

* remove header, improve submit block conditional logic, add integration tests

Co-authored-by: lane-wetmore <lane.wetmore@hashicorp.com>
2025-12-12 11:14:00 -06:00
Vault Automation
7bf7bf39fe
Resolve glob and js-yaml security vulnerabilities (#11271) (#11314)
* remove unused packages

* patch vulnerable versions of glob and js-yaml SECVULN-33202

Co-authored-by: claire bontempo <68122737+hellobontempo@users.noreply.github.com>
2025-12-12 09:08:46 -08:00
Vault Automation
fdacc28522
[UI] Ember Data Migration - LDAP Overview/Cleanup (#11255) (#11297)
* removes withConfig decorator and moves check to application route

* updates backendModel references in ldap engine to secretsEngine

* adds ldap config form class

* updates ldap config type in application route

* updates ldap configure and configuration routes to use api service

* adds capabilities service to ldap engine

* updates ldap mirage handler and scenario

* adds ldap capabilities constants and helper for fetching capabilities for roles

* updates ldap roles view to use api service

* updates ldap role details view to use api service

* updates ldap role create/edit views to use api service and form classes

* updates ldap role subdirectory view to use api service

* updates ldap role credentials view to use api service

* updates ldap libraries list views to use api service

* updates ldap library details view to use api service

* updates ldap library details accounts view to use api service

* updates ldap library details accounts check out view to use api service

* updates ldap library details configuration view to use api service

* updates ldap library create/edit workflows to use api service and form class

* fixes lint errors

* updates ldap overview to use api service

* updates ldap overview tests

* removes store and pagination services from ldap engine

* removes ldap related ember data files

* updates path_to_library var casing

Co-authored-by: Jordan Reimer <zofskeez@gmail.com>
2025-12-11 18:37:17 +00:00
vinay-gopalan
3c99c68600
Backport #11277 to ce/main (#11282) 2025-12-10 15:46:49 -06:00
Vault Automation
2e0f2f1646
[UI] Ember Data Migration - LDAP Library (#11254) (#11260)
* removes withConfig decorator and moves check to application route

* updates backendModel references in ldap engine to secretsEngine

* adds ldap config form class

* updates ldap config type in application route

* updates ldap configure and configuration routes to use api service

* adds capabilities service to ldap engine

* updates ldap mirage handler and scenario

* adds ldap capabilities constants and helper for fetching capabilities for roles

* updates ldap roles view to use api service

* updates ldap role details view to use api service

* updates ldap role create/edit views to use api service and form classes

* updates ldap role subdirectory view to use api service

* updates ldap role credentials view to use api service

* updates ldap libraries list views to use api service

* updates ldap library details view to use api service

* updates ldap library details accounts view to use api service

* updates ldap library details accounts check out view to use api service

* updates ldap library details configuration view to use api service

* updates ldap library create/edit workflows to use api service and form class

* fixes lint errors

* removes errant log

Co-authored-by: Jordan Reimer <zofskeez@gmail.com>
2025-12-10 10:38:40 -07:00
Vault Automation
00133872a2
Remove envelope encryption protos (#11041) (#11264)
* remove envelope encryption protos

* remove references from buf.yaml

* add back accidental delete

Co-authored-by: Rachel Culpepper <84159930+rculpepper@users.noreply.github.com>
2025-12-10 17:04:35 +00:00
Vault Automation
80a5800c16
[UI] Ember Data Migration - LDAP Roles (#11196) (#11249)
* removes withConfig decorator and moves check to application route

* updates backendModel references in ldap engine to secretsEngine

* adds ldap config form class

* updates ldap config type in application route

* updates ldap configure and configuration routes to use api service

* adds capabilities service to ldap engine

* updates ldap mirage handler and scenario

* adds ldap capabilities constants and helper for fetching capabilities for roles

* updates ldap roles view to use api service

* updates ldap role details view to use api service

* updates ldap role create/edit views to use api service and form classes

* updates ldap role subdirectory view to use api service

* updates ldap role credentials view to use api service

Co-authored-by: Jordan Reimer <zofskeez@gmail.com>
2025-12-09 17:26:04 +00:00
Vault Automation
78a4ea458f
replace vault-logo-spinner inline styles (#11234) (#11235)
Co-authored-by: claire bontempo <68122737+hellobontempo@users.noreply.github.com>
2025-12-08 13:32:57 -08:00
Vault Automation
9bc8a5074a
Vault-27794 : Update unsync as successful when destination no longer exists in secret sync (#10951) (#11218)
* VAULT-27794 - Secret sync bypassing errors while deleting a Vercel destination

* VAULT-27794 - Update unsync as successful when destination no longer exists

* VAULT-27794 - Added changelog and tests

* VAULT-27794 - Added changelog and tests

* VAULT-27794 - Comments updated

* VAULT-27794 - Updated code chanes as per review comments

* VAULT-27794 - Updated code chanes as per review comments

* Update changelog/_10951.txt



---------

Co-authored-by: santoshhashicorp <santosh.yelamarthi@hashicorp.com>
Co-authored-by: John-Michael Faircloth <fairclothjm@users.noreply.github.com>
2025-12-08 12:20:56 +05:30
Vault Automation
63bbbd163b
UI: Build policy generator (#10985) (#11209)
* wip policy stanza builder

* Implement add and delete new stanza functionality

* refactor to use Set()

* make copy updates, add callback functionality to pass policy to parent

* move policy formatter to util, add test coverage

* =separate acl-policy component into two smaller components, add automation snippets

* reorganize utils, add test coverage

* finish rename

* reduce scope of builder

* fix spacing

* add a ns test, remove unused spacing var

* rename arg

Co-authored-by: claire bontempo <68122737+hellobontempo@users.noreply.github.com>
2025-12-05 22:28:39 +00:00
Vault Automation
c34e25fb76
[UI] Ember Data Migration - LDAP Config (#11048) (#11194)
* removes withConfig decorator and moves check to application route

* updates backendModel references in ldap engine to secretsEngine

* adds ldap config form class

* updates ldap config type in application route

* updates ldap configure and configuration routes to use api service

Co-authored-by: Jordan Reimer <zofskeez@gmail.com>
2025-12-05 17:43:38 +00:00
Vault Automation
cfc130b40b
VAULT-28518 : added force-delete flag in secret sync (#10990) (#11180)
* added force-delete flag in secret sync

* added tests for force-delete destination flag

* added changelog

* updated test

* updated description

* updated force-delete flag

* updated changelog

* updated tests for force_delete

* Update changelog/_10990.txt



---------

Co-authored-by: suraj-simha <suraj.s@hashicorp.com>
Co-authored-by: Suraj-S <suraj.s4@ibm.com>
Co-authored-by: John-Michael Faircloth <fairclothjm@users.noreply.github.com>
2025-12-05 12:42:22 +05:30
akshya96
6c6777ef5c
Backport Fix adding additional public keys for tests in ent into ce/main (#11146)
* resolving conflicts for backport

* remove ent file
2025-12-04 11:44:25 -08:00
Vault Automation
782f19d644
actions: add fallback ondemand runners types (#11142) (#11149)
One feature of ondemand self-hosted runners is that we don't contend
with other repositories for self-hosted runners. The penalty for using
ondemand is that there are no hot runner pools, so provisioning time
is usually around 30 second but in worst can hit the two minutes mark.
These numbers rely on immediately capacity in the default region
(us-west-2). Every once in a while we see runner provisioning times for
ondemand CI runners go into the tens of minutes, presumably due to
capacity issues. Instead of waiting around for a runner that will
fulfill our single instance type, we'll add a few fallback types we can
attempt if we hit a capacity snag on our preferred machine.

Signed-off-by: Ryan Cragun <me@ryan.ec>
Co-authored-by: Ryan Cragun <me@ryan.ec>
2025-12-04 16:37:07 +00:00
Vault Automation
950d85a1dd
[UI][VAULT-40925]: PKI page headers (#11081) (#11148)
* Sign cerficate page header

* Generate certificates page header

* Role edit page header

* Role details page header

* Role create page header

* configure create and generate intemediate page headers

* generate root page header

* Pki issuer and tidy page headers

* More PKI page headers

* Update more pki page headers!

* Update PkiPageHeader component

* Pki error page header

* Fix page header title tests

Co-authored-by: Kianna <30884335+kiannaquach@users.noreply.github.com>
2025-12-04 16:00:06 +00:00
Vault Automation
2fca81e3c2
Backport Re-use kmip integ tests into ce/main (#11147)
* no-op commit

* Re-use kmip integ tests (#11050)

---------

Co-authored-by: Nick Cabatoff <ncabatoff@hashicorp.com>
2025-12-04 09:15:29 -05:00
Vault Automation
93a339547f
fix additional keys type in ce stubs (#11114) (#11145)
Co-authored-by: akshya96 <87045294+akshya96@users.noreply.github.com>
2025-12-03 17:02:19 -08:00
Vault Automation
13154a7337
adding handler to close frame on esc & maintain focus on original element (#11121) (#11134)
Co-authored-by: Dan Rivera <dan.rivera@hashicorp.com>
2025-12-03 21:54:18 +00:00
Vault Automation
ad0a5656b4
release: make the CE branch of 1.20 inactive (#11116) (#11123)
1.21 is the current active CE branch. Make the CE 1.20 branch inactive
so that we no longer backport changes to it.

Signed-off-by: Ryan Cragun <me@ryan.ec>
Co-authored-by: Ryan Cragun <me@ryan.ec>
2025-12-03 21:16:23 +00:00
Vault Automation
ea2c22beab
go: bump Go to 1.25.5 (#11112) (#11118)
* go: bump Go to 1.25.5
* update changelog

Signed-off-by: Ryan Cragun <me@ryan.ec>
Co-authored-by: Ryan Cragun <me@ryan.ec>
2025-12-03 20:38:22 +00:00
Vault Automation
e6072b50e5
[UI] Ember Data Migration - PKI Overview/Cleanup (#11024) (#11117)
* removes store query from pki config route

* updates pki overview route to use api service

* removes remaining references to store in pki tests

* removes unused store service injections in pki components

* removes store dependency from pki engine

* removes ember data related unit tests for pki

* removes pki ember data models, adapters and serializers

* removes unused pagination service injections in config-ui, kv, pki and sync engines

* removes unused store service injections from pki engine

* updates dashboard quick-actions-card component to fetch options using api service

* removes path-help test using pki model

Co-authored-by: Jordan Reimer <zofskeez@gmail.com>
2025-12-03 20:37:20 +00:00
Vault Automation
0e13196509
UI: Clarifies warning alert for string list input when a comma is intentional (#11046) (#11099)
* clarify warning message for scenarios where a comma is intentional

* add test

Co-authored-by: claire bontempo <68122737+hellobontempo@users.noreply.github.com>
2025-12-03 10:23:29 -08:00
Vault Automation
8172cf232f
actions: pin to latest actions (#11057) (#11069)
Signed-off-by: Ryan Cragun <me@ryan.ec>
Co-authored-by: Ryan Cragun <me@ryan.ec>
2025-12-03 18:15:05 +00:00
Vault Automation
dc1288eac7
VAULT-41153 Token create observations (#11036) (#11084)
* WIP

* wip

* VAULT-41153 token create observations

Co-authored-by: Violet Hynes <violet.hynes@hashicorp.com>
2025-12-03 16:17:03 +00:00
Vault Automation
643ed25952
VAULT-24240: Reject delete destination request if sync is disabled (#11013) (#11062)
* reject destination delete request if sync is disabled

* add changelog

* removed duplicate code, moved error message to separate designated file

* constructing error on a new line for readability

---------

Co-authored-by: Arjun K S <arjun.ks@hashicorp.com>
Co-authored-by: Arjun K S <Arjun.KS@ibm.com>
2025-12-03 21:10:13 +05:30
Vault Automation
cae5303ed9
[UI][VAULT-40924]: update remaining ldap page headers (#11042) (#11094)
* VAULT-40924 update remaining ldap page headers

* Fix failing tests!

* Add dropdown to LDAP libary details page header

* Fix libraries fix and add roles dropdown

* Update tests

* Apply suggestions from code review



* Fix failing tests.

---------

Co-authored-by: Kianna <30884335+kiannaquach@users.noreply.github.com>
Co-authored-by: lane-wetmore <lane.wetmore@hashicorp.com>
2025-12-02 22:18:21 -08:00
John-Michael Faircloth
2cb99c3ede
rotation manager: handle local paths (#11044) (#11055)
* rotation manager: handle local paths

* rename views

* rename helper methods

* refactor views into CombinedView

* rename to _ent and add unit tests

* changelog

* update comments

* check local from router to prevent unnecessary storage access

* fix test

* fix tests

* fix linter and tests: return explicit errors

* move path definition to non-ent file

* update changelog file name
2025-12-02 21:19:43 +00:00
Vault Automation
8cce47281e
[VAULT-41179] go: bump golang.org/x/crypto to v0.45.0 (#11056) (#11065)
* [VAULT-41179] go: bump golang.org/x/crypto to v0.45.0

Bump the golang.org/x/crypto module to v0.45.0 to resolve several CVE's
with the prior version:
  - https://github.com/advisories/GHSA-f6x5-jh6r-wrfv
  - https://github.com/advisories/GHSA-j5w8-q4qc-rx2x
  - https://pkg.go.dev/vuln/GO-2025-4134
  - https://pkg.go.dev/vuln/GO-2025-4135

Signed-off-by: Ryan Cragun <me@ryan.ec>
Co-authored-by: Ryan Cragun <me@ryan.ec>
2025-12-02 21:00:06 +00:00
Vault Automation
4a27262d7b
VAULT-41128 Add identity system observations to Vault (#11025) (#11028)
* VAULT-41128 Add identity system observations to Vault

* Small adjustments

Co-authored-by: Violet Hynes <violet.hynes@hashicorp.com>
2025-12-02 20:18:42 +00:00
Vault Automation
a38a966707
VAULT-41161 Update database observations to use RFC3339 datetimes (#11047) (#11053)
Co-authored-by: Violet Hynes <violet.hynes@hashicorp.com>
2025-12-02 17:43:11 +00:00
Vault Automation
c3eb2410a2
fix missing entry (#11038) (#11039)
Co-authored-by: Angel Garbarino <Monkeychip@users.noreply.github.com>
2025-12-02 09:10:59 -07:00
Bianca
bfbd6a9a93
Sync SCIM related files to CE/main (#11037) 2025-12-02 11:44:43 -03:00
Vault Automation
ff96dceedd
Backport Add override_pinned_version support on configure connection for database into ce/main (#10860)
* Add override_pinned_version support on configure connection for database (#10517)

* add DatabaseConfigEnt and split ce-ent impl for connectionWriteHandler() and selectPluginVersion()

* add override_pinned_version handling in connectionWriteHandler() and selectPluginVersion()

* split ce-ent impl for connectionReadHandler() to support override_pinned_version

* split ce-ent impl for databaseBackend.GetConnectionWithConfig() to support override_pinned_version

* split TestBackend_* units related to databased connection config CRUD into ce and ent

* remove EntDatabaseConfig from response

---------

Co-authored-by: Thy Ton <maithytonn@gmail.com>
2025-12-01 15:18:26 -08:00
Vault Automation
004d6da92c
[UI] Ember Data Migration: PKI Tidy (#11020) (#11049)
* updates pki tidy auto route to use api service

* updates pki tidy status view to use api service

* updates pki tidy auto and manual workflows to use api service and form class

Co-authored-by: Jordan Reimer <zofskeez@gmail.com>
2025-12-01 20:59:50 +00:00
Vault Automation
4e2f3ba489
Support external plugins in NewTestDockerCluster (#11023) (#11035) 2025-11-28 21:37:26 +00:00
Vault Automation
91a9b23651
VAULT-41142 amend omissions from ACME observations (#11027) (#11030)
* VAULT-41142 amend omissions from ACME observations

* Feedback

Co-authored-by: Violet Hynes <violet.hynes@hashicorp.com>
2025-11-28 15:46:42 +00:00
Vault Automation
32c1695825
fix entWrappedAuthPath() and entWrappedMountsPath() oss stubs (#10667) (#10689)
Co-authored-by: Thy Ton <maithytonn@gmail.com>
2025-11-26 12:19:02 -08:00
Vault Automation
a2eb1cf5df
[UI] VAULT-40910 VAULT-40947 VAULT-40948 VAULT-40949 VAULT-40950 VAULT-40953 Add top nav and update sidenav (#10982) (#11019)
* Add top nav and update sidenav

* Only show app-header when logged in

* Add and fix tests!

* Add changelog...

* Update SideNav to AppSideNav

* Fix ts errors

* Add dropdown back...

* Fix homelink

* Fix docs sidenav

* Update comments

Co-authored-by: Kianna <30884335+kiannaquach@users.noreply.github.com>
2025-11-26 19:36:33 +00:00
Vault Automation
5ff894f494
[UI] Ember Data Migration - PKI Roles/Certificates (#11004) (#11016)
* removes unused model hook from issuer import route

* updates pki roles route to use api service

* updates pki role details route to use api service

* removes Ember Data Model support from pki-not-valid-after-form component

* updates pki role generate and sign workflows to use certificate form and api service

* adds pki certificate form

* updates pki certificates routes to use api service

* adds pki role form

* removes Ember Data Model support from pki-key-parameters component

* removes Ember Data Model support from pki-key-usage component

* updates pki role create and edit views to use api service and form class

* fixes tests

* fixes a11y violations

Co-authored-by: Jordan Reimer <zofskeez@gmail.com>
2025-11-26 09:29:58 -07:00
Vault Automation
10d28ee713
pin posthog version (#11006) (#11007)
Co-authored-by: Evan Moncuso <46458931+emoncuso@users.noreply.github.com>
2025-11-25 19:05:49 +00:00