vault/website/content/api-docs/system
Tom Proctor 030bba4e68
Support rootless plugin containers (#24236)
* Pulls in github.com/go-secure-stdlib/plugincontainer@v0.3.0 which exposes a new `Config.Rootless` option to opt in to extra container configuration options that allow establishing communication with a non-root plugin within a rootless container runtime.
* Adds a new "rootless" option for plugin runtimes, so Vault needs to be explicitly told whether the container runtime on the machine is rootless or not. It defaults to false as rootless installs are not the default.
* Updates `run_config.go` to use the new option when the plugin runtime is rootless.
* Adds new `-rootless` flag to `vault plugin runtime register`, and `rootless` API option to the register API.
* Adds rootless Docker installation to CI to support tests for the new functionality.
* Minor test refactor to minimise the number of test Vault cores that need to be made for the external plugin container tests.
* Documentation for the new rootless configuration and the new (reduced) set of restrictions for plugin containers.
* As well as adding rootless support, we've decided to drop explicit support for podman for now, but there's no barrier other than support burden to adding it back again in future so it will depend on demand.
2023-11-28 14:07:07 +00:00
..
inspect [DOCS] Administrative namespace updates (#23208) 2023-09-21 12:07:25 -07:00
mfa [DOCS] Confirm restricted endpoint alerts (main) (#23514) 2023-10-05 13:00:40 -04:00
replication Update enterprise vs hcp alerts (#23619) 2023-10-11 17:59:27 -05:00
storage Update enterprise vs hcp alerts (#23619) 2023-10-11 17:59:27 -05:00
audit-hash.mdx [DOCS] Confirm restricted endpoint alerts (main) (#23514) 2023-10-05 13:00:40 -04:00
audit.mdx [DOCS] Administrative namespace updates (#23208) 2023-09-21 12:07:25 -07:00
auth.mdx Fix the administrative banner for sys endpoints (#22888) 2023-09-11 09:20:31 +02:00
capabilities-accessor.mdx [docs] Convert titles to sentense case (#21426) 2023-06-30 19:22:07 -04:00
capabilities-self.mdx Fix the administrative banner for sys endpoints (#22888) 2023-09-11 09:20:31 +02:00
capabilities.mdx Fix the administrative banner for sys endpoints (#22888) 2023-09-11 09:20:31 +02:00
config-auditing.mdx [DOCS] Administrative namespace updates (#23208) 2023-09-21 12:07:25 -07:00
config-control-group.mdx Update enterprise vs hcp alerts (#23619) 2023-10-11 17:59:27 -05:00
config-cors.mdx [DOCS] Administrative namespace updates (#23208) 2023-09-21 12:07:25 -07:00
config-group-policy-application.mdx Update enterprise vs hcp alerts (#23619) 2023-10-11 17:59:27 -05:00
config-reload.mdx [DOCS] Administrative namespace updates (#23208) 2023-09-21 12:07:25 -07:00
config-state.mdx Remove asterixes in header (#23548) 2023-10-09 13:03:54 -07:00
config-ui.mdx [DOCS] Administrative namespace updates (#23208) 2023-09-21 12:07:25 -07:00
control-group.mdx Update enterprise vs hcp alerts (#23619) 2023-10-11 17:59:27 -05:00
decode-token.mdx [DOCS] Administrative namespace updates (#23208) 2023-09-21 12:07:25 -07:00
experiments.mdx [DOCS] Administrative namespace updates (#23208) 2023-09-21 12:07:25 -07:00
generate-recovery-token.mdx [DOCS] Administrative namespace updates (#23208) 2023-09-21 12:07:25 -07:00
generate-root.mdx [DOCS] Administrative namespace updates (#23208) 2023-09-21 12:07:25 -07:00
ha-status.mdx Fix the administrative banner for sys endpoints (#22888) 2023-09-11 09:20:31 +02:00
health.mdx [DOCS] Administrative namespace updates (#23208) 2023-09-21 12:07:25 -07:00
host-info.mdx [DOCS] Administrative namespace updates (#23208) 2023-09-21 12:07:25 -07:00
in-flight-req.mdx [DOCS] Administrative namespace updates (#23208) 2023-09-21 12:07:25 -07:00
index.mdx [docs] Convert titles to sentense case (#21426) 2023-06-30 19:22:07 -04:00
init.mdx [DOCS] Administrative namespace updates (#23208) 2023-09-21 12:07:25 -07:00
internal-counters.mdx Add method and path for Read the client count configuration (#23551) 2023-10-12 10:10:04 -04:00
internal-specs-openapi.mdx Fix the administrative banner for sys endpoints (#22888) 2023-09-11 09:20:31 +02:00
internal-ui-feature.mdx Fix the administrative banner for sys endpoints (#22888) 2023-09-11 09:20:31 +02:00
internal-ui-mounts.mdx Fix the administrative banner for sys endpoints (#22888) 2023-09-11 09:20:31 +02:00
internal-ui-namespaces.mdx [docs] Convert titles to sentense case (#21426) 2023-06-30 19:22:07 -04:00
internal-ui-resultant-acl.mdx Fix the administrative banner for sys endpoints (#22888) 2023-09-11 09:20:31 +02:00
internal-ui-version.mdx VAULT-20669: Add New Authenticated Endpoint for Version (#23740) 2023-10-26 12:52:52 -04:00
key-status.mdx [DOCS] Administrative namespace updates (#23208) 2023-09-21 12:07:25 -07:00
leader.mdx Fix the administrative banner for sys endpoints (#22888) 2023-09-11 09:20:31 +02:00
lease-count-quotas.mdx Update enterprise vs hcp alerts (#23619) 2023-10-11 17:59:27 -05:00
leases.mdx Fix the administrative banner for sys endpoints (#22888) 2023-09-11 09:20:31 +02:00
license.mdx Update enterprise vs hcp alerts (#23619) 2023-10-11 17:59:27 -05:00
loggers.mdx [DOCS] Administrative namespace updates (#23208) 2023-09-21 12:07:25 -07:00
managed-keys.mdx [DOCS] Administrative namespace updates (#23208) 2023-09-21 12:07:25 -07:00
metrics.mdx [DOCS] Administrative namespace updates (#23208) 2023-09-21 12:07:25 -07:00
monitor.mdx [DOCS] Confirm restricted endpoint alerts (main) (#23514) 2023-10-05 13:00:40 -04:00
mounts.mdx Allow backends to extract credentials from payloads and trigger an authentication workflow (#23924) 2023-11-21 14:36:49 -05:00
namespaces.mdx [docs] Convert titles to sentense case (#21426) 2023-06-30 19:22:07 -04:00
plugins-catalog.mdx add API docs for plugin runtimes (#23223) 2023-09-28 05:35:22 +00:00
plugins-reload-backend.mdx Fix the administrative banner for sys endpoints (#22888) 2023-09-11 09:20:31 +02:00
plugins-runtimes-catalog.mdx Support rootless plugin containers (#24236) 2023-11-28 14:07:07 +00:00
policies-password.mdx Fix the administrative banner for sys endpoints (#22888) 2023-09-11 09:20:31 +02:00
policies.mdx Fix the administrative banner for sys endpoints (#22888) 2023-09-11 09:20:31 +02:00
policy.mdx Fix the administrative banner for sys endpoints (#22888) 2023-09-11 09:20:31 +02:00
pprof.mdx [DOCS] Administrative namespace updates (#23208) 2023-09-21 12:07:25 -07:00
quotas-config.mdx [DOCS] Administrative namespace updates (#23208) 2023-09-21 12:07:25 -07:00
rate-limit-quotas.mdx [DOCS] Administrative namespace updates (#23208) 2023-09-21 12:07:25 -07:00
raw.mdx [DOCS] Administrative namespace updates (#23208) 2023-09-21 12:07:25 -07:00
rekey-recovery-key.mdx [DOCS] Administrative namespace updates (#23208) 2023-09-21 12:07:25 -07:00
rekey.mdx [DOCS] Administrative namespace updates (#23208) 2023-09-21 12:07:25 -07:00
remount.mdx Fix the administrative banner for sys endpoints (#22888) 2023-09-11 09:20:31 +02:00
rotate-config.mdx [DOCS] Administrative namespace updates (#23208) 2023-09-21 12:07:25 -07:00
rotate.mdx [DOCS] Administrative namespace updates (#23208) 2023-09-21 12:07:25 -07:00
seal-backend-status.mdx First draft of Seal HA documentation (#23252) 2023-09-22 13:18:48 -05:00
seal-status.mdx Fix the administrative banner for sys endpoints (#22888) 2023-09-11 09:20:31 +02:00
seal.mdx [DOCS] Administrative namespace updates (#23208) 2023-09-21 12:07:25 -07:00
sealwrap-rewrap.mdx Update enterprise vs hcp alerts (#23619) 2023-10-11 17:59:27 -05:00
secrets-sync.mdx Add configuration section to sync API docs (#24179) 2023-11-27 16:10:37 -06:00
step-down.mdx Update step-down.mdx to describe behavior against non-active nodes (#23657) 2023-10-18 19:33:46 -07:00
tools.mdx Fix the administrative banner for sys endpoints (#22888) 2023-09-11 09:20:31 +02:00
unseal.mdx [DOCS] Administrative namespace updates (#23208) 2023-09-21 12:07:25 -07:00
user-lockout.mdx Fix the administrative banner for sys endpoints (#22888) 2023-09-11 09:20:31 +02:00
version-history.mdx Fix the administrative banner for sys endpoints (#22888) 2023-09-11 09:20:31 +02:00
wrapping-lookup.mdx Fix the administrative banner for sys endpoints (#22888) 2023-09-11 09:20:31 +02:00
wrapping-rewrap.mdx Fix the administrative banner for sys endpoints (#22888) 2023-09-11 09:20:31 +02:00
wrapping-unwrap.mdx Fix the administrative banner for sys endpoints (#22888) 2023-09-11 09:20:31 +02:00
wrapping-wrap.mdx Fix the administrative banner for sys endpoints (#22888) 2023-09-11 09:20:31 +02:00