vault/builtin/logical/transit
Vault Automation ad4d228f1f
Backport Sgm/without envelope wireup into ce/main (#15700)
* no-op commit

* Sgm/without envelope wireup (#15441)

* Changes needed to allow encryption/decryption with gcpckms in managed keys

* wip

* wip

* wip

* Normalize key purposes across implementations

* update kmse

* Update kms wrapper deps to those that support WithoutEnvelope

* crucially, supply the option in the wrapper managed key impl

* restore the kmse update

* no, thats done via the encryptWithManagedKey in Policy, not needed here

* changelog

* remove replace

* Update sdk's go-kms-wrapping

* mod tidy

* Switch to using the main wrapper even for testing.

* update test cluster usage

* Update go.mod

Co-authored-by: wiz-inc-0e7a25329d[bot] <177343755+wiz-inc-0e7a25329d[bot]@users.noreply.github.com>

* Update go.mod

Co-authored-by: wiz-inc-0e7a25329d[bot] <177343755+wiz-inc-0e7a25329d[bot]@users.noreply.github.com>

* more go.sum update

* PR feedback

* GCPC KMS needed some more config massaging to work w/ encryption

---------

Co-authored-by: wiz-inc-0e7a25329d[bot] <177343755+wiz-inc-0e7a25329d[bot]@users.noreply.github.com>

---------

Co-authored-by: Scott Miller <smiller@hashicorp.com>
Co-authored-by: wiz-inc-0e7a25329d[bot] <177343755+wiz-inc-0e7a25329d[bot]@users.noreply.github.com>
2026-06-22 18:40:49 +00:00
..
cmd/transit license: update headers to IBM Corp. (#10229) (#10233) 2025-10-21 15:20:20 -06:00
api_utils.go license: update headers to IBM Corp. (#10229) (#10233) 2025-10-21 15:20:20 -06:00
api_utils_test.go license: update headers to IBM Corp. (#10229) (#10233) 2025-10-21 15:20:20 -06:00
backend.go Backport Add managed keys support to Transit rewrap endpoint into ce/main (#15496) 2026-06-19 10:38:08 -05:00
backend_ce.go license: update headers to IBM Corp. (#10229) (#10233) 2025-10-21 15:20:20 -06:00
backend_test.go On-Time Autorotation Maintained in a Queue. (#14463) (#14503) 2026-05-06 12:39:43 -04:00
key_utils.go Change Policy locking so that GetPolicy always returns a locked policy (#13899) (#14277) 2026-04-27 11:34:47 -04:00
managed_key_util.go license: update headers to IBM Corp. (#10229) (#10233) 2025-10-21 15:20:20 -06:00
observation_consts.go Backport VAULT-41675: Transit observations, key management into ce/main (#12380) 2026-02-18 15:19:18 +01:00
path_backup.go Backport VAULT-41675: Transit observations, key management into ce/main (#12380) 2026-02-18 15:19:18 +01:00
path_backup_test.go Backport VAULT-41675: Transit observations, key management into ce/main (#12380) 2026-02-18 15:19:18 +01:00
path_byok.go Change Policy locking so that GetPolicy always returns a locked policy (#13899) (#14277) 2026-04-27 11:34:47 -04:00
path_byok_test.go Backport VAULT-41675: Transit observations, key management into ce/main (#12380) 2026-02-18 15:19:18 +01:00
path_cache_config.go license: update headers to IBM Corp. (#10229) (#10233) 2025-10-21 15:20:20 -06:00
path_cache_config_test.go license: update headers to IBM Corp. (#10229) (#10233) 2025-10-21 15:20:20 -06:00
path_certificates.go Change Policy locking so that GetPolicy always returns a locked policy (#13899) (#14277) 2026-04-27 11:34:47 -04:00
path_certificates_test.go Backport Delete cluster.Start for NewTestCluster clusters, and deprecate and clean up cluster.Cleanup for NewTestCluster clusters into ce/main (#14105) 2026-04-21 09:33:14 -04:00
path_cmac_ce.go license: update headers to IBM Corp. (#10229) (#10233) 2025-10-21 15:20:20 -06:00
path_config_keys.go license: update headers to IBM Corp. (#10229) (#10233) 2025-10-21 15:20:20 -06:00
path_config_keys_test.go license: update headers to IBM Corp. (#10229) (#10233) 2025-10-21 15:20:20 -06:00
path_datakey.go Backport Add managed keys support to Transit rewrap endpoint into ce/main (#15496) 2026-06-19 10:38:08 -05:00
path_datakey_test.go Backport Vault 42177 Add Backend Field into ce/main (#12152) 2026-02-03 22:48:12 +00:00
path_decrypt.go Backport Add managed keys support to Transit rewrap endpoint into ce/main (#15496) 2026-06-19 10:38:08 -05:00
path_decrypt_bench_test.go license: update headers to IBM Corp. (#10229) (#10233) 2025-10-21 15:20:20 -06:00
path_decrypt_test.go Backport Vault 42177 Add Backend Field into ce/main (#12152) 2026-02-03 22:48:12 +00:00
path_encrypt.go Backport Sgm/without envelope wireup into ce/main (#15700) 2026-06-22 18:40:49 +00:00
path_encrypt_bench_test.go license: update headers to IBM Corp. (#10229) (#10233) 2025-10-21 15:20:20 -06:00
path_encrypt_test.go Backport Vault 42177 Add Backend Field into ce/main (#12152) 2026-02-03 22:48:12 +00:00
path_export.go Change Policy locking so that GetPolicy always returns a locked policy (#13899) (#14277) 2026-04-27 11:34:47 -04:00
path_export_test.go Backport Delete cluster.Start for NewTestCluster clusters, and deprecate and clean up cluster.Cleanup for NewTestCluster clusters into ce/main (#14105) 2026-04-21 09:33:14 -04:00
path_hash.go license: update headers to IBM Corp. (#10229) (#10233) 2025-10-21 15:20:20 -06:00
path_hash_test.go license: update headers to IBM Corp. (#10229) (#10233) 2025-10-21 15:20:20 -06:00
path_hmac.go Backport Add managed keys support to Transit rewrap endpoint into ce/main (#15496) 2026-06-19 10:38:08 -05:00
path_hmac_test.go Backport Delete cluster.Start for NewTestCluster clusters, and deprecate and clean up cluster.Cleanup for NewTestCluster clusters into ce/main (#14105) 2026-04-21 09:33:14 -04:00
path_import.go Change Policy locking so that GetPolicy always returns a locked policy (#13899) (#14277) 2026-04-27 11:34:47 -04:00
path_import_test.go Change Policy locking so that GetPolicy always returns a locked policy (#13899) (#14277) 2026-04-27 11:34:47 -04:00
path_keys.go Backport Change to Trail of Bits library for PQC into ce/main (#14616) 2026-06-12 20:54:07 +00:00
path_keys_config.go Change Policy locking so that GetPolicy always returns a locked policy (#13899) (#14277) 2026-04-27 11:34:47 -04:00
path_keys_config_test.go Backport Delete cluster.Start for NewTestCluster clusters, and deprecate and clean up cluster.Cleanup for NewTestCluster clusters into ce/main (#14105) 2026-04-21 09:33:14 -04:00
path_keys_test.go Backport Delete cluster.Start for NewTestCluster clusters, and deprecate and clean up cluster.Cleanup for NewTestCluster clusters into ce/main (#14105) 2026-04-21 09:33:14 -04:00
path_random.go Random API improvements (#12119) (#12143) 2026-02-03 20:02:48 +00:00
path_random_test.go license: update headers to IBM Corp. (#10229) (#10233) 2025-10-21 15:20:20 -06:00
path_restore.go Backport VAULT-41675: Transit observations, key management into ce/main (#12380) 2026-02-18 15:19:18 +01:00
path_restore_test.go Backport VAULT-41675: Transit observations, key management into ce/main (#12380) 2026-02-18 15:19:18 +01:00
path_rewrap.go Backport Sgm/without envelope wireup into ce/main (#15700) 2026-06-22 18:40:49 +00:00
path_rewrap_test.go Backport Vault 42177 Add Backend Field into ce/main (#12152) 2026-02-03 22:48:12 +00:00
path_rotate.go Change Policy locking so that GetPolicy always returns a locked policy (#13899) (#14277) 2026-04-27 11:34:47 -04:00
path_sign_verify.go Change Policy locking so that GetPolicy always returns a locked policy (#13899) (#14277) 2026-04-27 11:34:47 -04:00
path_sign_verify_ce.go license: update headers to IBM Corp. (#10229) (#10233) 2025-10-21 15:20:20 -06:00
path_sign_verify_test.go Backport Change to Trail of Bits library for PQC into ce/main (#14616) 2026-06-12 20:54:07 +00:00
path_trim.go Change Policy locking so that GetPolicy always returns a locked policy (#13899) (#14277) 2026-04-27 11:34:47 -04:00
path_trim_test.go Change Policy locking so that GetPolicy always returns a locked policy (#13899) (#14277) 2026-04-27 11:34:47 -04:00
path_wrapping_key.go Change Policy locking so that GetPolicy always returns a locked policy (#13899) (#14277) 2026-04-27 11:34:47 -04:00
path_wrapping_key_test.go license: update headers to IBM Corp. (#10229) (#10233) 2025-10-21 15:20:20 -06:00
pqc_utils_ce.go Backport Change to Trail of Bits library for PQC into ce/main (#14616) 2026-06-12 20:54:07 +00:00
stepwise_test.go license: update headers to IBM Corp. (#10229) (#10233) 2025-10-21 15:20:20 -06:00