Commit graph

22581 commits

Author SHA1 Message Date
hc-github-team-secure-vault-core
9826cb0ff6 Merge remote-tracking branch 'remotes/from/ce/main' 2026-02-03 16:14:56 +00:00
Vault Automation
edbc507488
Backport Add spiffe secrets engine into ce/main (#10648) 2026-02-03 10:41:44 -05:00
hc-github-team-secure-vault-core
9750b87e1c Merge remote-tracking branch 'remotes/from/ce/main'
Some checks failed
build / setup (push) Has been cancelled
CI / setup (push) Has been cancelled
Run linters / Setup (push) Has been cancelled
Run linters / Semgrep (push) Has been cancelled
Check Copywrite Headers / copywrite (push) Has been cancelled
Security Scan / scan (push) Has been cancelled
build / Check ce/* Pull Requests (push) Has been cancelled
build / ui (push) Has been cancelled
build / artifacts-ce (push) Has been cancelled
build / artifacts-ent (push) Has been cancelled
build / hcp-image (push) Has been cancelled
build / test (push) Has been cancelled
build / test-hcp-image (push) Has been cancelled
build / completed-successfully (push) Has been cancelled
CI / Run Autopilot upgrade tool (push) Has been cancelled
CI / Run Go tests (push) Has been cancelled
CI / Run Go tests tagged with testonly (push) Has been cancelled
CI / Run Go tests with data race detection (push) Has been cancelled
CI / Run Go tests with FIPS configuration (push) Has been cancelled
CI / Test UI (push) Has been cancelled
CI / tests-completed (push) Has been cancelled
Run linters / Deprecated functions (push) Has been cancelled
Run linters / Code checks (push) Has been cancelled
Run linters / Protobuf generate delta (push) Has been cancelled
Run linters / Format (push) Has been cancelled
2026-02-01 20:30:35 +00:00
Vault Automation
097417cd62
Adding ibm license tests for ent files (#11803) (#12114)
* adding ibm tests for ent files

* changing isHashicorpLicense to isIBMLicense and moving DiagnoseCheckLicenseGeneration to core_util_common.go

* reverting non-license related tests

* removing hashicorp license test

Co-authored-by: akshya96 <87045294+akshya96@users.noreply.github.com>
2026-01-31 01:52:59 +00:00
Vault Automation
38bb6eae78
Add PasswordModify to new LDAP Connection interface wrapper (#12094) (#12113)
* Add method to ldap connection interface

* Move to interface wrapper

Co-authored-by: Robert <17119716+robmonte@users.noreply.github.com>
2026-01-30 23:45:35 +00:00
hc-github-team-secure-vault-core
e2f694d05b Merge remote-tracking branch 'remotes/from/ce/main'
Some checks failed
build / setup (push) Has been cancelled
CI / setup (push) Has been cancelled
Run linters / Setup (push) Has been cancelled
Run linters / Semgrep (push) Has been cancelled
Check Copywrite Headers / copywrite (push) Has been cancelled
Security Scan / scan (push) Has been cancelled
build / Check ce/* Pull Requests (push) Has been cancelled
build / ui (push) Has been cancelled
build / artifacts-ce (push) Has been cancelled
build / artifacts-ent (push) Has been cancelled
build / hcp-image (push) Has been cancelled
build / test (push) Has been cancelled
build / test-hcp-image (push) Has been cancelled
build / completed-successfully (push) Has been cancelled
CI / Run Autopilot upgrade tool (push) Has been cancelled
CI / Run Go tests (push) Has been cancelled
CI / Run Go tests tagged with testonly (push) Has been cancelled
CI / Run Go tests with data race detection (push) Has been cancelled
CI / Run Go tests with FIPS configuration (push) Has been cancelled
CI / Test UI (push) Has been cancelled
CI / tests-completed (push) Has been cancelled
Run linters / Deprecated functions (push) Has been cancelled
Run linters / Code checks (push) Has been cancelled
Run linters / Protobuf generate delta (push) Has been cancelled
Run linters / Format (push) Has been cancelled
2026-01-30 21:06:04 +00:00
Vault Automation
81c1c3778b
VAULT-41092: transit engine metrics (#11814) (#12103)
* add a new struct for the total number of successful requests for transit and transform

* implement tracking for encrypt path

* implement tracking in encrypt path

* add tracking in rewrap

* add tracking to datakey path

* add tracking to  hmac path

* add tracking to sign  path

* add tracking to verify path

* unit tests for verify path

* add tracking to cmac path

* reset the global counter in each unit test

* add tracking to hmac verify

* add methods to retrieve and flush transit count

* modify the methods that store and update data protection call counts

* update the methods

* add a helper method to combine replicated and local data call counts

* add tracking to the endpoint

* fix some formatting errors

* add unit tests to path encrypt for tracking

* add unit tests to decrypt path

* fix linter error

* add unit tests to test update and store methods for data protection calls

* stub fix: do not create separate files

* fix the tracking by coordinating replicated and local data, add unit tests

* update all reference to the new data struct

* revert to previous design with just one global counter for all calls for each cluster

* complete external test

* no need to check if current count is greater than 0, remove it

* feedback: remove unnacassary comments about atomic addition, standardize comments

* leave jira id on todo comment, remove unused method

* rename mathods by removing HWM and max in names, update jira id in todo comment, update response field key name

* feedback: remove explicit counter in cmac tests, instead put in the expected number

* feedback: remove explicit tracking in the rest of the tests

* feedback: separate transit testing into its own external test

* Update vault/consumption_billing_util_test.go



* update comment after test name change

* fix comments

* fix comments in test

* another comment fix

* feedback: remove incorrect comment

* fix a CE test

* fix the update method: instead of storing max, increment by the current count value

* update the unit test, remove local prefix as argument to the methods since we store only to non-replicated paths

* update the external test

* fix a bug: reset the counter everyime we update the stored counter value to prevent double-counting

* update one of the tests

* update external test

---------

Co-authored-by: Amir Aslamov <amir.aslamov@hashicorp.com>
Co-authored-by: divyaac <divya.chandrasekaran@hashicorp.com>
2026-01-30 15:16:05 -05:00
hc-github-team-secure-vault-core
8ab500f393 Merge remote-tracking branch 'remotes/from/ce/main' 2026-01-30 20:04:24 +00:00
Vault Automation
8edcbc5a04
UI: Add tune support to KMIP Secrets Engine (#12028) (#12105)
* adding kmip header

* updating header usage across pages

* updating config routes to use new pages

* fixes to config page & test

* Remove unused comp

* fixes for headers

* fix in router

* update headers to use page comp directly, add tabs comp

* remember copywrite

* code cleanup

Co-authored-by: Dan Rivera <dan.rivera@hashicorp.com>
2026-01-30 15:03:28 -05:00
hc-github-team-secure-vault-core
78c0f949f4 Merge remote-tracking branch 'remotes/from/ce/main' 2026-01-30 17:11:30 +00:00
Vault Automation
3e8ab749f8
VAULT-41291 Adding changes to reduce cloning (#11886) (#12095)
* adding changes to reduce cloning

* adding chanelog

* adding back one cloning on entity

Co-authored-by: JMGoldsmith <spartanaudio@gmail.com>
2026-01-30 17:59:14 +01:00
hc-github-team-secure-vault-core
6923ae7279 Merge remote-tracking branch 'remotes/from/ce/main'
Some checks are pending
build / setup (push) Waiting to run
build / Check ce/* Pull Requests (push) Blocked by required conditions
build / ui (push) Blocked by required conditions
build / artifacts-ce (push) Blocked by required conditions
build / artifacts-ent (push) Blocked by required conditions
build / hcp-image (push) Blocked by required conditions
build / test (push) Blocked by required conditions
build / test-hcp-image (push) Blocked by required conditions
build / completed-successfully (push) Blocked by required conditions
CI / setup (push) Waiting to run
CI / Run Autopilot upgrade tool (push) Blocked by required conditions
CI / Run Go tests (push) Blocked by required conditions
CI / Run Go tests tagged with testonly (push) Blocked by required conditions
CI / Run Go tests with data race detection (push) Blocked by required conditions
CI / Run Go tests with FIPS configuration (push) Blocked by required conditions
CI / Test UI (push) Blocked by required conditions
CI / tests-completed (push) Blocked by required conditions
Run linters / Setup (push) Waiting to run
Run linters / Deprecated functions (push) Blocked by required conditions
Run linters / Code checks (push) Blocked by required conditions
Run linters / Protobuf generate delta (push) Blocked by required conditions
Run linters / Format (push) Blocked by required conditions
Run linters / Semgrep (push) Waiting to run
Check Copywrite Headers / copywrite (push) Waiting to run
Security Scan / scan (push) Waiting to run
2026-01-30 02:54:08 +00:00
Vault Automation
64566789fe
[VAULT-40843] Secret Engine Mount Tune: hide version dropdown (#12086) (#12087)
Co-authored-by: Shannon Roberts (Beagin) <beagins@users.noreply.github.com>
2026-01-29 18:15:21 -08:00
hc-github-team-secure-vault-core
93eacdd95a Merge remote-tracking branch 'remotes/from/ce/main'
Some checks failed
build / setup (push) Waiting to run
build / Check ce/* Pull Requests (push) Blocked by required conditions
build / ui (push) Blocked by required conditions
build / artifacts-ce (push) Blocked by required conditions
build / artifacts-ent (push) Blocked by required conditions
build / hcp-image (push) Blocked by required conditions
build / test (push) Blocked by required conditions
build / test-hcp-image (push) Blocked by required conditions
build / completed-successfully (push) Blocked by required conditions
CI / setup (push) Waiting to run
CI / Run Autopilot upgrade tool (push) Blocked by required conditions
CI / Run Go tests (push) Blocked by required conditions
CI / Run Go tests tagged with testonly (push) Blocked by required conditions
CI / Run Go tests with data race detection (push) Blocked by required conditions
CI / Run Go tests with FIPS configuration (push) Blocked by required conditions
CI / Test UI (push) Blocked by required conditions
CI / tests-completed (push) Blocked by required conditions
Run linters / Setup (push) Waiting to run
Run linters / Deprecated functions (push) Blocked by required conditions
Run linters / Code checks (push) Blocked by required conditions
Run linters / Protobuf generate delta (push) Blocked by required conditions
Run linters / Format (push) Blocked by required conditions
Run linters / Semgrep (push) Waiting to run
Check Copywrite Headers / copywrite (push) Waiting to run
Security Scan / scan (push) Waiting to run
test-ci-bootstrap / bootstrap-ci (push) Has been cancelled
2026-01-29 20:04:26 +00:00
Vault Automation
eb1d3edfb0
UI: update namespace empty state (#11924) (#12082)
* update namespace empty state

add in refresh button to empty state and update tests

update button design

* update copy

* update when exit button is shown

* update css class

* revert state changes

Co-authored-by: lane-wetmore <lane.wetmore@hashicorp.com>
2026-01-29 19:19:42 +00:00
hc-github-team-secure-vault-core
35ab1d2b01 Merge remote-tracking branch 'remotes/from/ce/main' 2026-01-29 18:08:04 +00:00
Vault Automation
c2034cb08a
actions: pin to latest actions (#12060) (#12069)
- actions/checkout -> v6.0.2: some minor changes around setting the
  ACTIONS_ORCHESTRATION_ID and some fixes to `fetch-tags`.
- actions/setup-python -> v6.2.0: Node 24 compat

Signed-off-by: Ryan Cragun <me@ryan.ec>
Co-authored-by: Ryan Cragun <me@ryan.ec>
2026-01-29 10:07:15 -08:00
Vault Automation
ad7cf8ca8d
[UI] VAULT-41963 add reporting sidenav (#12011) (#12055)
* VAULT-41963 add reporting sidenav

* Fix failing tests and add new tests

* Add copywrite headers

* Update checks for reporting

* Update vault reporting acceptance tests

* Update tests to use test helpers

* Update sidebar enterprise test selectors

* Update vault reporting title test

Co-authored-by: Kianna <30884335+kiannaquach@users.noreply.github.com>
2026-01-29 09:53:35 -08:00
hc-github-team-secure-vault-core
c1bdf5621d Merge remote-tracking branch 'remotes/from/ce/main' 2026-01-29 17:19:08 +00:00
Vault Automation
2eb6905459
UI: remove cluster route and model boundary route mixins (#11873) (#12025)
* remove cluster route and model boundary route mixins

* add copyright header

* remove old unit test

* change replication/application route

* don't use cluster route in replication

* why have a base class at all?

* test tweaks

* remove afterModel redirect in replication

* refactor targetRouteName to use derived state

* Update route class name on replication-dr-promote.js



---------

Co-authored-by: Matthew Irish <39469+meirish@users.noreply.github.com>
Co-authored-by: claire bontempo <68122737+hellobontempo@users.noreply.github.com>
2026-01-29 11:02:04 -06:00
Vault Automation
1a68ff6123
VAULT-41682 - Replace EmptyState components with Hds::ApplicationState in database directory (#12065) (#12068)
* VAULT-41682 - Replace EmptyState components with Hds::ApplicationState in database directory

* fixed co-pilot review comments

* fixed failing test case

Co-authored-by: mohit-hashicorp <mohit.ojha@hashicorp.com>
2026-01-29 10:54:53 -06:00
hc-github-team-secure-vault-core
b8c30e91f9 Merge remote-tracking branch 'remotes/from/ce/main' 2026-01-29 16:09:53 +00:00
Vault Automation
d7d140a3a3
Backport Add kmip cluster tests. Also fix a bug in EnableDRSecondaryNoWait. into ce/main (#12059)
* no-op commit

* Apply CE changes from #12052

---------

Co-authored-by: ncabatoff <ncabatoff@hashicorp.com>
2026-01-29 10:38:19 -05:00
hc-github-team-secure-vault-core
74f56a027f Merge remote-tracking branch 'remotes/from/ce/main'
Some checks are pending
build / setup (push) Waiting to run
build / Check ce/* Pull Requests (push) Blocked by required conditions
build / ui (push) Blocked by required conditions
build / artifacts-ce (push) Blocked by required conditions
build / artifacts-ent (push) Blocked by required conditions
build / hcp-image (push) Blocked by required conditions
build / test (push) Blocked by required conditions
build / test-hcp-image (push) Blocked by required conditions
build / completed-successfully (push) Blocked by required conditions
CI / setup (push) Waiting to run
CI / Run Autopilot upgrade tool (push) Blocked by required conditions
CI / Run Go tests (push) Blocked by required conditions
CI / Run Go tests tagged with testonly (push) Blocked by required conditions
CI / Run Go tests with data race detection (push) Blocked by required conditions
CI / Run Go tests with FIPS configuration (push) Blocked by required conditions
CI / Test UI (push) Blocked by required conditions
CI / tests-completed (push) Blocked by required conditions
Run linters / Setup (push) Waiting to run
Run linters / Deprecated functions (push) Blocked by required conditions
Run linters / Code checks (push) Blocked by required conditions
Run linters / Protobuf generate delta (push) Blocked by required conditions
Run linters / Format (push) Blocked by required conditions
Run linters / Semgrep (push) Waiting to run
Check Copywrite Headers / copywrite (push) Waiting to run
Security Scan / scan (push) Waiting to run
2026-01-28 19:07:21 +00:00
Vault Automation
c499aa5288
UI: Namespace Wizard (#11556) (#12053)
* fill guided start content

* move namespace logic into page component

* add page component tests for namespace wizard

* add tree chart and changelog, update state management

* fix failing page usage test

* add back in breadcrumb update lost in merge conflict resolution across files

* fix test

* update terraform template function usage

* Update ui/app/components/wizard/namespaces/step-3.hbs



* formatting and fixes

* revert usage page changes

* move snippet generators into util and update code snippet initialization

* update test namespace page args

* move namespace wizard logic into its own component

* fix nested namespace creation via api and cli code snippets

* test update

* nested namespace terraform snippet

* remove outdated comment

* test clean up and hide wizard in CE

---------

Co-authored-by: lane-wetmore <lane.wetmore@hashicorp.com>
Co-authored-by: claire bontempo <68122737+hellobontempo@users.noreply.github.com>
2026-01-28 19:07:13 +00:00
hc-github-team-secure-vault-core
99d8cb345a Merge remote-tracking branch 'remotes/from/ce/main' 2026-01-28 18:04:47 +00:00
Vault Automation
e3cdfec694
fix: Keep calls to t.Fatal in test goroutine (#12044) (#12045)
Co-authored-by: Mike Palmiotto <mpalmi@ibm.com>
2026-01-28 12:37:03 -05:00
Vault Automation
bf12f404e8
[UI] VAULT-40951 Add top nav dropdown (#12027) (#12050)
* Add top nav dropdown

* Add help menu tests

Co-authored-by: Kianna <30884335+kiannaquach@users.noreply.github.com>
2026-01-28 09:35:06 -08:00
hc-github-team-secure-vault-core
4f6e4472c7 Merge remote-tracking branch 'remotes/from/ce/main' 2026-01-28 17:10:12 +00:00
Vault Automation
2eceb5650c
VAULT-41682 - Replace EmptyState components with Hds::ApplicationState in keymgmt directory (#12042) (#12048)
* VAULT-41682 - Replace EmptyState components with Hds::ApplicationState in keymgmt directory

* fixed indentation

* fixed failing test cases

Co-authored-by: mohit-hashicorp <mohit.ojha@hashicorp.com>
2026-01-28 11:59:06 -05:00
Vault Automation
fde84a90c2
VAULT-41682 - generalized and center-aligned HDS Application State text (#12040) (#12049)
Co-authored-by: mohit-hashicorp <mohit.ojha@hashicorp.com>
2026-01-28 11:58:34 -05:00
Vault Automation
84cf94dba8
VAULT-41682 - Updates dashboard cards to use HDS:ApplicationState instead of EmptyState (#12041) (#12047)
* VAULT-41682 - EmptyState update to dashboard cards

* fix - spelling



---------

Co-authored-by: mohit-hashicorp <mohit.ojha@hashicorp.com>
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
2026-01-28 11:58:05 -05:00
hc-github-team-secure-vault-core
e566d616c6 Merge remote-tracking branch 'remotes/from/ce/main'
Some checks are pending
build / setup (push) Waiting to run
build / Check ce/* Pull Requests (push) Blocked by required conditions
build / ui (push) Blocked by required conditions
build / artifacts-ce (push) Blocked by required conditions
build / artifacts-ent (push) Blocked by required conditions
build / hcp-image (push) Blocked by required conditions
build / test (push) Blocked by required conditions
build / test-hcp-image (push) Blocked by required conditions
build / completed-successfully (push) Blocked by required conditions
CI / setup (push) Waiting to run
CI / Run Autopilot upgrade tool (push) Blocked by required conditions
CI / Run Go tests (push) Blocked by required conditions
CI / Run Go tests tagged with testonly (push) Blocked by required conditions
CI / Run Go tests with data race detection (push) Blocked by required conditions
CI / Run Go tests with FIPS configuration (push) Blocked by required conditions
CI / Test UI (push) Blocked by required conditions
CI / tests-completed (push) Blocked by required conditions
Run linters / Setup (push) Waiting to run
Run linters / Deprecated functions (push) Blocked by required conditions
Run linters / Code checks (push) Blocked by required conditions
Run linters / Protobuf generate delta (push) Blocked by required conditions
Run linters / Format (push) Blocked by required conditions
Run linters / Semgrep (push) Waiting to run
Check Copywrite Headers / copywrite (push) Waiting to run
Security Scan / scan (push) Waiting to run
2026-01-28 01:30:45 +00:00
Vault Automation
47b000674b
UI: Convert namespace service to typescript (#12008) (#12039)
* convert to typescript

* move getOptions to namespace service

* delete unneeded ts file

* add test coverage and cleanup getOptions method

* use new admin const

Co-authored-by: claire bontempo <68122737+hellobontempo@users.noreply.github.com>
2026-01-27 17:07:50 -08:00
hc-github-team-secure-vault-core
ca2a251ff8 Merge remote-tracking branch 'remotes/from/ce/main' 2026-01-28 00:05:05 +00:00
Vault Automation
ab5ff72603
Vault-40972 Third Party Plugin Counts (#12010) (#12038)
* temp

* temp

* Modified the tests a bit

* One more modification

* Added two tests for official and third party plugins

* TEmp

* Added external test with primary and secondary

* Made some fixes based on comments

* Fixing a linter error

* One more fix

Co-authored-by: divyaac <divya.chandrasekaran@hashicorp.com>
2026-01-27 15:27:49 -08:00
hc-github-team-secure-vault-core
781759f98a Merge remote-tracking branch 'remotes/from/ce/main'
Some checks are pending
build / setup (push) Waiting to run
build / Check ce/* Pull Requests (push) Blocked by required conditions
build / ui (push) Blocked by required conditions
build / artifacts-ce (push) Blocked by required conditions
build / artifacts-ent (push) Blocked by required conditions
build / hcp-image (push) Blocked by required conditions
build / test (push) Blocked by required conditions
build / test-hcp-image (push) Blocked by required conditions
build / completed-successfully (push) Blocked by required conditions
CI / setup (push) Waiting to run
CI / Run Autopilot upgrade tool (push) Blocked by required conditions
CI / Run Go tests (push) Blocked by required conditions
CI / Run Go tests tagged with testonly (push) Blocked by required conditions
CI / Run Go tests with data race detection (push) Blocked by required conditions
CI / Run Go tests with FIPS configuration (push) Blocked by required conditions
CI / Test UI (push) Blocked by required conditions
CI / tests-completed (push) Blocked by required conditions
Run linters / Setup (push) Waiting to run
Run linters / Deprecated functions (push) Blocked by required conditions
Run linters / Code checks (push) Blocked by required conditions
Run linters / Protobuf generate delta (push) Blocked by required conditions
Run linters / Format (push) Blocked by required conditions
Run linters / Semgrep (push) Waiting to run
Check Copywrite Headers / copywrite (push) Waiting to run
Security Scan / scan (push) Waiting to run
2026-01-27 18:04:21 +00:00
Vault Automation
2e32e679d0
Backport PKI (SCEP): support compound octet strings for inner PKCS7 content into ce/main (#12021)
* PKI (SCEP): support compound octet strings for inner PKCS7 content (#12019)

* Support compound octet strings for inner PKCS7 content

* Add cl

* Remove hashicorp/go-cmp ENT dependency

---------

Co-authored-by: Steven Clark <steven.clark@hashicorp.com>
2026-01-27 17:07:07 +00:00
hc-github-team-secure-vault-core
200f62f13f Merge remote-tracking branch 'remotes/from/ce/main'
Some checks are pending
build / setup (push) Waiting to run
build / Check ce/* Pull Requests (push) Blocked by required conditions
build / ui (push) Blocked by required conditions
build / artifacts-ce (push) Blocked by required conditions
build / artifacts-ent (push) Blocked by required conditions
build / hcp-image (push) Blocked by required conditions
build / test (push) Blocked by required conditions
build / test-hcp-image (push) Blocked by required conditions
build / completed-successfully (push) Blocked by required conditions
CI / setup (push) Waiting to run
CI / Run Autopilot upgrade tool (push) Blocked by required conditions
CI / Run Go tests (push) Blocked by required conditions
CI / Run Go tests tagged with testonly (push) Blocked by required conditions
CI / Run Go tests with data race detection (push) Blocked by required conditions
CI / Run Go tests with FIPS configuration (push) Blocked by required conditions
CI / Test UI (push) Blocked by required conditions
CI / tests-completed (push) Blocked by required conditions
Run linters / Setup (push) Waiting to run
Run linters / Deprecated functions (push) Blocked by required conditions
Run linters / Code checks (push) Blocked by required conditions
Run linters / Protobuf generate delta (push) Blocked by required conditions
Run linters / Format (push) Blocked by required conditions
Run linters / Semgrep (push) Waiting to run
Check Copywrite Headers / copywrite (push) Waiting to run
Security Scan / scan (push) Waiting to run
2026-01-27 08:02:46 +00:00
Vault Automation
852ac403bb
Root Credential Rotation Workflows (#11647) (#11996)
* Verify vault can generate dynamic credentials and rotate root password

* Added new line at end of the script file

* Remove extra space in sh script

* Remove extra space in sh script

* Created modular structure and other fixes

* linting issues

* lint issues

* Linting issue in verify-secrets.sh

* Linting issue in verify-secrets.sh

* Linting issues in verify-secrets.sh and verify-rotation.sh

* Linting issues

* Linting issues

* Linting issues

* Reverted the changes made to ldap-configs.sh and ldap-verify-configs

* Fix missing newline at end of ldap-verify-configs

Add a newline at the end of the ldap-verify-configs script.

* test ldap changes

* test ldap changes

* reverted the configuration for testing ldap [ci skip]

* reverted the configuration for testing ldap [ci skip]

* Refactoring

* Update ldap.tf

* Update ldap.tf [ci skip]

* Update ldap.tf

* Adding Password policy in ldap secret engine config

* Root credential rotation workflows

* linting issues

* Update test-run-enos-scenario-matrix.yml to check ldap changes

* Update test-run-enos-scenario-matrix.yml reverted

* conflicts resolved

* changes

* Update test-run-enos-scenario-matrix.yml to test ldap changes

* Update test-run-enos-scenario-matrix.yml reverted

* added functions

* linting issues

* linting issues

* linting issues

* Update test-run-enos-scenario-matrix.yml to tst ldap

* Update test-run-enos-scenario-matrix.yml reverted

* review changes

* Update test-run-enos-scenario-matrix.yml to test ldap

* lint issue

* reverted Update test-run-enos-scenario-matrix.yml

* refactor

* Update test-run-enos-scenario-matrix.yml test ldap

* Update verify-rotation.sh

* Update verify-rotation.sh

* Update test-run-enos-scenario-matrix.yml reverted

---------

Co-authored-by: pranaya092000 <pranaya.p@hashicorp.com>
Co-authored-by: Pranaya <Pranaya.P@ibm.com>
Co-authored-by: Luis (LT) Carbonell <lt.carbonell@hashicorp.com>
2026-01-27 13:17:18 +05:30
hc-github-team-secure-vault-core
4b7fd40005 Merge remote-tracking branch 'remotes/from/ce/main' 2026-01-27 07:07:00 +00:00
Vault Automation
5a54a1bb41
LDAP Check out Check in System test Cases Part-1 (#11792) (#11986)
* LDAP Check out Check in System test Cases Part-1

* Test run on pipeline

* Test run on pipeline

* Linter error fix

* Fix linter issue

* Linter error fix

* lint issue

* lint issue

* lint issue

* lint issue

* lint issue

* lint issues

* bug fix

* lint fix

* Run test on pipeline

* Remove file enos.vars.hcl from repository

* Revert "Remove file enos.vars.hcl from repository"

This reverts commit bec9bcd5e1d8b07a662756c2385ca90e035fc125.

* Restore enos.vars.hcl to repository

* CI build failure fix

* CI bug fix

* CI bug fix

* CI bug fix

* CI bug fix

* CI bug fix

* Replace string based error detection with exit code

* Changing pipeline run variable to false

---------

Co-authored-by: KajalKusum <kajal.kusum@hashicorp.com>
Co-authored-by: Kajal Kusum <kajal.kusum@ibm.com>
Co-authored-by: Luis (LT) Carbonell <lt.carbonell@hashicorp.com>
2026-01-27 12:31:51 +05:30
hc-github-team-secure-vault-core
63e969ba51 Merge remote-tracking branch 'remotes/from/ce/main'
Some checks are pending
build / setup (push) Waiting to run
build / Check ce/* Pull Requests (push) Blocked by required conditions
build / ui (push) Blocked by required conditions
build / artifacts-ce (push) Blocked by required conditions
build / artifacts-ent (push) Blocked by required conditions
build / hcp-image (push) Blocked by required conditions
build / test (push) Blocked by required conditions
build / test-hcp-image (push) Blocked by required conditions
build / completed-successfully (push) Blocked by required conditions
CI / setup (push) Waiting to run
CI / Run Autopilot upgrade tool (push) Blocked by required conditions
CI / Run Go tests (push) Blocked by required conditions
CI / Run Go tests tagged with testonly (push) Blocked by required conditions
CI / Run Go tests with data race detection (push) Blocked by required conditions
CI / Run Go tests with FIPS configuration (push) Blocked by required conditions
CI / Test UI (push) Blocked by required conditions
CI / tests-completed (push) Blocked by required conditions
Run linters / Setup (push) Waiting to run
Run linters / Deprecated functions (push) Blocked by required conditions
Run linters / Code checks (push) Blocked by required conditions
Run linters / Protobuf generate delta (push) Blocked by required conditions
Run linters / Format (push) Blocked by required conditions
Run linters / Semgrep (push) Waiting to run
Check Copywrite Headers / copywrite (push) Waiting to run
Security Scan / scan (push) Waiting to run
2026-01-27 05:07:53 +00:00
Vault Automation
6841981524
Root Credential Configuration Workflows (#11606) (#11991)
* Verify vault can generate dynamic credentials and rotate root password

* Added new line at end of the script file

* Remove extra space in sh script

* Remove extra space in sh script

* Created modular structure and other fixes

* linting issues

* lint issues

* Linting issue in verify-secrets.sh

* Linting issue in verify-secrets.sh

* Linting issues in verify-secrets.sh and verify-rotation.sh

* Linting issues

* Linting issues

* Linting issues

* Reverted the changes made to ldap-configs.sh and ldap-verify-configs

* Fix missing newline at end of ldap-verify-configs

Add a newline at the end of the ldap-verify-configs script.

* test ldap changes

* test ldap changes

* reverted the configuration for testing ldap [ci skip]

* reverted the configuration for testing ldap [ci skip]

* Refactoring

* Update ldap.tf

* Update ldap.tf [ci skip]

* Update ldap.tf

* Adding Password policy in ldap secret engine config

* Update test-run-enos-scenario-matrix.yml with ldap changes

* Reverted Update test-run-enos-scenario-matrix.yml for testing ldap changes

* conflict changes [ci skip]

* Update test-run-enos-scenario-matrix.yml for ldap testing

* Reverted Update test-run-enos-scenario-matrix.yml

* ldap chnged to MOUNT

* Update test-run-enos-scenario-matrix.yml to test ldap changes

* Update test-run-enos-scenario-matrix.yml reverted

* updated review comments

* updated review comments

* Update test-run-enos-scenario-matrix.yml to test ldap

* Update test-run-enos-scenario-matrix.yml reverted

* Update verify-secrets.sh

---------

Co-authored-by: pranaya092000 <pranaya.p@hashicorp.com>
Co-authored-by: Pranaya <Pranaya.P@ibm.com>
Co-authored-by: Luis (LT) Carbonell <lt.carbonell@hashicorp.com>
2026-01-27 04:48:50 +00:00
hc-github-team-secure-vault-core
f0834d49cf Merge remote-tracking branch 'remotes/from/ce/main' 2026-01-27 01:30:59 +00:00
Vault Automation
b6349bf3d0
stub auth data for usage page (#12006) (#12009)
Co-authored-by: claire bontempo <68122737+hellobontempo@users.noreply.github.com>
2026-01-27 00:57:20 +00:00
hc-github-team-secure-vault-core
e6d2297294 Merge remote-tracking branch 'remotes/from/ce/main' 2026-01-27 00:05:25 +00:00
Vault Automation
7fc3705838
remove EntDatabaseConfig key from ce database config response (#11045) (#11060)
Co-authored-by: Thy Ton <maithytonn@gmail.com>
2026-01-26 15:55:59 -08:00
hc-github-team-secure-vault-core
d3082b959a Merge remote-tracking branch 'remotes/from/ce/main' 2026-01-26 23:04:35 +00:00
Vault Automation
3a108ea88e
Backport [VAULT-41857] pipeline(find-artifact): add support for finding artifacts from branches into ce/main (#11971)
* [VAULT-41857] pipeline(find-artifact): add support for finding artifacts from branches (#11799)

Add support for finding matching workflow artifacts from branches rather than PRs. This allows us to trigger custom HCP image builds from a branch rather than an PR. It also enables us to build and test the HCP image on a scheduled nightly cadence, which we've also enabled.

As part of these changes I also added support for specifying which environment you want to test and threaded it through the cloud scenario now that there are multiple variants. We also make the testing workflow workflow_dispatch-able so that we can trigger HVD testing for any custom image in any environment without building a new image.

Signed-off-by: Ryan Cragun <me@ryan.ec>
Co-authored-by: Ryan Cragun <me@ryan.ec>
2026-01-26 22:27:10 +00:00