upstream/vault
1
0
Fork 0
mirror of https://github.com/hashicorp/vault.git synced 2026-02-03 20:40:45 -05:00
Code Issues Projects Releases Packages Wiki Activity Actions 11
vault/enos/modules
History
Vault Automation 0e0abf8f4e
Root credential rollback workflow (#11616) (#11785) 
* Add LDAP secrets engine verification with rollback functionality

- Added LDAP secrets engine read verification module
- Implemented secrets-rollback.sh script for LDAP credential rotation testing
- Updated enos configuration files for LDAP testing support
- Added vault.zip distribution file for testing

* Optimize LDAP rollback script - improve readability and reduce redundancy

* demonstated 3 case of rollback under various situations and maintain system consistancy

* modified ldap.tf file with changes needed for secret-rollback script file

* Fix LDAP secrets engine: remove unused credential_ttl_buffer variable

* Fix shell script formatting for shfmt compliance

* Refactor LDAP secrets rollback script for clarity

* Add LDAP verification configuration to ldap.tf

Added local variable for LDAP login data and configured resource for verifying Vault LDAP configurations.

* Comment out vault_revision in enos.vars.hcl

* Remove unused generate_ldif function from secrets-rollback script

* Make sleep delays configurable in secrets-rollback script

* Add LDAP secrets rollback verification scripts and update ldap.tf configuration

* Update LDAP secrets rollback test scripts

* Update LDAP secrets engine read module

* Fix formatting in ldap.tf - correct indentation

* Change LDAP secrets engine verification to true

* Refactor LDAP rollback script for clarity

Updated script to improve clarity and consistency checks after LDAP root rotation failures.

* Add copyright and license information to script

* Fix formatting in secrets-rollback-transactional.sh

* Change LDAP secrets engine verification to false(reverting to old state)

Tried running root rotation  rollback cases with ldap set true

---------

Co-authored-by: sukanya-prakash <sukanya.p@hashicorp.com>
Co-authored-by: Sukanya P <sukanyap@Sukanyas-MacBook-Pro.local>
Co-authored-by: Sukanya P <sukanyap@mac.n3d-in.ibm.com>
2026-01-16 09:01:56 -05:00
..
artifact/metadata [VAULT-41521] enos(ec2_infor): update scenario base images (#11508) (#11533) 2025-12-22 14:17:51 -07:00
autopilot_upgrade_storageconfig license: update headers to IBM Corp. (#10229) (#10233) 2025-10-21 15:20:20 -06:00
backend_consul license: update headers to IBM Corp. (#10229) (#10233) 2025-10-21 15:20:20 -06:00
backend_raft license: update headers to IBM Corp. (#10229) (#10233) 2025-10-21 15:20:20 -06:00
benchmark license: update headers to IBM Corp. (#10229) (#10233) 2025-10-21 15:20:20 -06:00
build_artifactory_artifact license: update headers to IBM Corp. (#10229) (#10233) 2025-10-21 15:20:20 -06:00
build_artifactory_package license: update headers to IBM Corp. (#10229) (#10233) 2025-10-21 15:20:20 -06:00
build_crt license: update headers to IBM Corp. (#10229) (#10233) 2025-10-21 15:20:20 -06:00
build_local [UI] - migrate to pnpm for JS package management (#11651) (#11661) 2026-01-09 11:45:14 -06:00
choose_follower_host license: update headers to IBM Corp. (#10229) (#10233) 2025-10-21 15:20:20 -06:00
cloud_docker_vault_cluster Add docker based backend to the cloud scenario (#9751) (#10626) 2025-11-06 11:59:40 -07:00
create_vpc license: update headers to IBM Corp. (#10229) (#10233) 2025-10-21 15:20:20 -06:00
disable_selinux [VAULT-41521] enos(ec2_infor): update scenario base images (#11508) (#11533) 2025-12-22 14:17:51 -07:00
docker_namespace_token Add docker based backend to the cloud scenario (#9751) (#10626) 2025-11-06 11:59:40 -07:00
docker_network Add docker based backend to the cloud scenario (#9751) (#10626) 2025-11-06 11:59:40 -07:00
ec2_info [VAULT-41521] enos(ec2_infor): update scenario base images (#11508) (#11533) 2025-12-22 14:17:51 -07:00
generate_dr_operation_token license: update headers to IBM Corp. (#10229) (#10233) 2025-10-21 15:20:20 -06:00
generate_failover_secondary_token license: update headers to IBM Corp. (#10229) (#10233) 2025-10-21 15:20:20 -06:00
generate_secondary_public_key license: update headers to IBM Corp. (#10229) (#10233) 2025-10-21 15:20:20 -06:00
generate_secondary_token license: update headers to IBM Corp. (#10229) (#10233) 2025-10-21 15:20:20 -06:00
get_local_metadata license: update headers to IBM Corp. (#10229) (#10233) 2025-10-21 15:20:20 -06:00
hcp Add docker based backend to the cloud scenario (#9751) (#10626) 2025-11-06 11:59:40 -07:00
install_packages [VAULT-41521] enos(ec2_infor): update scenario base images (#11508) (#11533) 2025-12-22 14:17:51 -07:00
k8s_deploy_vault license: update headers to IBM Corp. (#10229) (#10233) 2025-10-21 15:20:20 -06:00
k8s_vault_verify_replication license: update headers to IBM Corp. (#10229) (#10233) 2025-10-21 15:20:20 -06:00
k8s_vault_verify_ui license: update headers to IBM Corp. (#10229) (#10233) 2025-10-21 15:20:20 -06:00
k8s_vault_verify_version license: update headers to IBM Corp. (#10229) (#10233) 2025-10-21 15:20:20 -06:00
k8s_vault_verify_write_data license: update headers to IBM Corp. (#10229) (#10233) 2025-10-21 15:20:20 -06:00
load_docker_image license: update headers to IBM Corp. (#10229) (#10233) 2025-10-21 15:20:20 -06:00
local_kind_cluster license: update headers to IBM Corp. (#10229) (#10233) 2025-10-21 15:20:20 -06:00
read_license license: update headers to IBM Corp. (#10229) (#10233) 2025-10-21 15:20:20 -06:00
replication_data license: update headers to IBM Corp. (#10229) (#10233) 2025-10-21 15:20:20 -06:00
restart_consul license: update headers to IBM Corp. (#10229) (#10233) 2025-10-21 15:20:20 -06:00
restart_vault license: update headers to IBM Corp. (#10229) (#10233) 2025-10-21 15:20:20 -06:00
seal_awskms license: update headers to IBM Corp. (#10229) (#10233) 2025-10-21 15:20:20 -06:00
seal_pkcs11 license: update headers to IBM Corp. (#10229) (#10233) 2025-10-21 15:20:20 -06:00
seal_shamir license: update headers to IBM Corp. (#10229) (#10233) 2025-10-21 15:20:20 -06:00
set_up_external_integration_target license: update headers to IBM Corp. (#10229) (#10233) 2025-10-21 15:20:20 -06:00
shutdown_multiple_nodes license: update headers to IBM Corp. (#10229) (#10233) 2025-10-21 15:20:20 -06:00
shutdown_node license: update headers to IBM Corp. (#10229) (#10233) 2025-10-21 15:20:20 -06:00
softhsm_create_vault_keys license: update headers to IBM Corp. (#10229) (#10233) 2025-10-21 15:20:20 -06:00
softhsm_distribute_vault_keys license: update headers to IBM Corp. (#10229) (#10233) 2025-10-21 15:20:20 -06:00
softhsm_init license: update headers to IBM Corp. (#10229) (#10233) 2025-10-21 15:20:20 -06:00
softhsm_install [VAULT-41521] enos(ec2_infor): update scenario base images (#11508) (#11533) 2025-12-22 14:17:51 -07:00
start_vault license: update headers to IBM Corp. (#10229) (#10233) 2025-10-21 15:20:20 -06:00
stop_vault license: update headers to IBM Corp. (#10229) (#10233) 2025-10-21 15:20:20 -06:00
target_ec2_fleet license: update headers to IBM Corp. (#10229) (#10233) 2025-10-21 15:20:20 -06:00
target_ec2_instances license: update headers to IBM Corp. (#10229) (#10233) 2025-10-21 15:20:20 -06:00
target_ec2_shim license: update headers to IBM Corp. (#10229) (#10233) 2025-10-21 15:20:20 -06:00
target_ec2_spot_fleet license: update headers to IBM Corp. (#10229) (#10233) 2025-10-21 15:20:20 -06:00
vault_agent license: update headers to IBM Corp. (#10229) (#10233) 2025-10-21 15:20:20 -06:00
vault_cluster [VAULT-41521] enos(ec2_infor): update scenario base images (#11508) (#11533) 2025-12-22 14:17:51 -07:00
vault_failover_demote_dr_primary license: update headers to IBM Corp. (#10229) (#10233) 2025-10-21 15:20:20 -06:00
vault_failover_promote_dr_secondary license: update headers to IBM Corp. (#10229) (#10233) 2025-10-21 15:20:20 -06:00
vault_failover_update_dr_primary license: update headers to IBM Corp. (#10229) (#10233) 2025-10-21 15:20:20 -06:00
vault_get_cluster_ips license: update headers to IBM Corp. (#10229) (#10233) 2025-10-21 15:20:20 -06:00
vault_proxy license: update headers to IBM Corp. (#10229) (#10233) 2025-10-21 15:20:20 -06:00
vault_raft_remove_node_and_verify license: update headers to IBM Corp. (#10229) (#10233) 2025-10-21 15:20:20 -06:00
vault_raft_remove_peer license: update headers to IBM Corp. (#10229) (#10233) 2025-10-21 15:20:20 -06:00
vault_setup_dr_primary license: update headers to IBM Corp. (#10229) (#10233) 2025-10-21 15:20:20 -06:00
vault_setup_perf_primary license: update headers to IBM Corp. (#10229) (#10233) 2025-10-21 15:20:20 -06:00
vault_setup_replication_secondary license: update headers to IBM Corp. (#10229) (#10233) 2025-10-21 15:20:20 -06:00
vault_step_down license: update headers to IBM Corp. (#10229) (#10233) 2025-10-21 15:20:20 -06:00
vault_test_ui license: update headers to IBM Corp. (#10229) (#10233) 2025-10-21 15:20:20 -06:00
vault_unseal_replication_followers license: update headers to IBM Corp. (#10229) (#10233) 2025-10-21 15:20:20 -06:00
vault_upgrade license: update headers to IBM Corp. (#10229) (#10233) 2025-10-21 15:20:20 -06:00
vault_verify_agent_output license: update headers to IBM Corp. (#10229) (#10233) 2025-10-21 15:20:20 -06:00
vault_verify_autopilot license: update headers to IBM Corp. (#10229) (#10233) 2025-10-21 15:20:20 -06:00
vault_verify_billing_start_date license: update headers to IBM Corp. (#10229) (#10233) 2025-10-21 15:20:20 -06:00
vault_verify_default_lcq license: update headers to IBM Corp. (#10229) (#10233) 2025-10-21 15:20:20 -06:00
vault_verify_dr_replication license: update headers to IBM Corp. (#10229) (#10233) 2025-10-21 15:20:20 -06:00
vault_verify_performance_replication Update perf replication checking script (#10134) (#10500) 2025-11-03 10:49:34 -08:00
vault_verify_raft_auto_join_voter license: update headers to IBM Corp. (#10229) (#10233) 2025-10-21 15:20:20 -06:00
vault_verify_removed_node license: update headers to IBM Corp. (#10229) (#10233) 2025-10-21 15:20:20 -06:00
vault_verify_removed_node_shim license: update headers to IBM Corp. (#10229) (#10233) 2025-10-21 15:20:20 -06:00
vault_verify_replication license: update headers to IBM Corp. (#10229) (#10233) 2025-10-21 15:20:20 -06:00
vault_verify_ui license: update headers to IBM Corp. (#10229) (#10233) 2025-10-21 15:20:20 -06:00
vault_verify_undo_logs license: update headers to IBM Corp. (#10229) (#10233) 2025-10-21 15:20:20 -06:00
vault_verify_version license: update headers to IBM Corp. (#10229) (#10233) 2025-10-21 15:20:20 -06:00
vault_wait_for_cluster_unsealed license: update headers to IBM Corp. (#10229) (#10233) 2025-10-21 15:20:20 -06:00
vault_wait_for_leader license: update headers to IBM Corp. (#10229) (#10233) 2025-10-21 15:20:20 -06:00
vault_wait_for_seal_rewrap license: update headers to IBM Corp. (#10229) (#10233) 2025-10-21 15:20:20 -06:00
verify_log_secrets license: update headers to IBM Corp. (#10229) (#10233) 2025-10-21 15:20:20 -06:00
verify_seal_type license: update headers to IBM Corp. (#10229) (#10233) 2025-10-21 15:20:20 -06:00
verify_secrets_engines Root credential rollback workflow (#11616) (#11785) 2026-01-16 09:01:56 -05:00