hashicorp / vault

32 Pull requests merged by 18 people

• Require special privileges to list irrevocable leases

  #11888 merged Jun 28, 2021

• ci: update go_test to match one from ent

  #11951 merged Jun 28, 2021

• Adding changelog for #11502

  #11944 merged Jun 25, 2021

• Diagnose License Check (OSS)

  #11939 merged Jun 25, 2021

• Vault-1983: Use fairsharing to distribute workers between queues

  #11789 merged Jun 25, 2021

• plugins/ad: Add rotate-role endpoint

  #11942 merged Jun 25, 2021

• ci: cache go modules

  #11935 merged Jun 25, 2021

• docs: vault-helm add license update steps

  #11911 merged Jun 25, 2021

• website: upgrade react-head

  #11938 merged Jun 25, 2021

• diagnose: Add seal transit tls check

  #11922 merged Jun 24, 2021

• agent/template: add static_secret_render_interval configurable

  #11934 merged Jun 24, 2021

• TLS Verification Bugfixes

  #11910 merged Jun 24, 2021

• Mongo doesnt allow periods in usernames

  #11872 merged Jun 24, 2021

• Fix for Issue 11863 - Panic when creating/updating approle role with token_type

  #11864 merged Jun 24, 2021

• Diagnose Storage Panic Bugfixes

  #11923 merged Jun 24, 2021

• update content param for improved attribution

  #11929 merged Jun 24, 2021

• Fix diagnose panic when configuration file does not exist

  #11932 merged Jun 23, 2021

• website: catch up stable-website

  #11933 merged Jun 23, 2021

• Backport [1.7.x]: Cassandra: Refactor PEM parsing logic (#11861)

  #11921 merged Jun 23, 2021

• Remove fragile link to docs from code.

  #11928 merged Jun 23, 2021

• website: bump use-cases to latest

  #11930 merged Jun 23, 2021

• docs: corrects JSON and issuer for identity tokens

  #11924 merged Jun 23, 2021

• website: upgrade code-block

  #11903 merged Jun 22, 2021

• Backport 1.7.3: UI/fix safari oidc login (#11884)

  #11906 merged Jun 22, 2021

• Backport 1.6.6: UI/fix safari oidc login (#11884)

  #11905 merged Jun 22, 2021

• Checking Validity of all Certs in the chain [VAULT-2114]

  #11883 merged Jun 22, 2021

• RabbitMQ - Add username customization

  #11899 merged Jun 22, 2021

• Document vault.core.expiration_time_epoch metric.

  #11919 merged Jun 22, 2021

• Update contributing guidelines

  #11917 merged Jun 22, 2021

• Remove Lingering Print Statements in Diagnose

  #11918 merged Jun 22, 2021

• Rename badly-named changelog file.

  #11915 merged Jun 22, 2021

• UI/cp validations kv duplicate path

  #11878 merged Jun 22, 2021

13 Pull requests opened by 11 people

• KV 2 fix number as key

  #11920 opened Jun 22, 2021

• Docs: Add link to more sentinel examples

  #11931 opened Jun 23, 2021

• Update plugin-portal.mdx

  #11937 opened Jun 24, 2021

• Add UI feature allowing credential rotation for static DB roles

  #11941 opened Jun 25, 2021

• MongoDB Atlas: Add username customization docs

  #11943 opened Jun 25, 2021

• fix dropped errors in external_tests

  #11947 opened Jun 27, 2021

• ci: tidy up go_test command

  #11952 opened Jun 28, 2021

• Augment lease revocation metrics

  #11954 opened Jun 28, 2021

• halfway there to adding path and replacing id

  #11955 opened Jun 28, 2021

• Update mongodb atlas plugin version

  #11956 opened Jun 28, 2021

• Update ElasticSearch DB plugin to v0.8.0

  #11957 opened Jun 28, 2021

• docs: AWS KMS updates for key management secrets engine

  #11958 opened Jun 29, 2021

• remove trailing / on leases API endpoint

  #11959 opened Jun 29, 2021

77 Issues closed by 8 people

• leases lookup blocked by syslog audit

  #11946 closed Jun 28, 2021

• KV V2 key name is limited to 110 characters.

  #11940 closed Jun 28, 2021

• Add a 'sealed-status' gauge to telemetry

  #3689 closed Jun 25, 2021

• InternalTokenHelper's Store() may be losing token writes when invoked via official Docker image

  #6048 closed Jun 24, 2021

• Vault PKI should support roles that constrain the CN domain but not the email domain

  #5991 closed Jun 24, 2021

• MongoDB Atlas API Plugin

  #5962 closed Jun 24, 2021

• KV Secrets Engine - Version 2 (API) - parameter / max_versions defaults to 10 document bug

  #5907 closed Jun 24, 2021

• Transit support for format preserving encryption / decryption

  #5894 closed Jun 24, 2021

• Lot of sockets left in CLOSE_WAIT state

  #5872 closed Jun 24, 2021

• Zookeeper Connection getting closed while saving new key in HA setup using ZooKeeper

  #5830 closed Jun 24, 2021

• Cannot create child token with identity policy

  #5668 closed Jun 24, 2021

• Add maintenance code to /v1/sys/health

  #5550 closed Jun 24, 2021

• Limit number of credentials issued by Vault

  #5475 closed Jun 24, 2021

• FreeIPA Secrets Engine feature

  #5418 closed Jun 24, 2021

• PKI backend sign-data endpoint similar to transits

  #5333 closed Jun 24, 2021

• Improve metrics naming by using labels

  #5326 closed Jun 24, 2021

• Documentation contradiction - root token vs cubbyhole

  #5142 closed Jun 24, 2021

• Separate data and leader election DynamoDB tables

  #5077 closed Jun 24, 2021

• Feature Request: Reload local CA store on SIGHUP

  #4928 closed Jun 24, 2021

• Improve Lease Loading

  #4857 closed Jun 24, 2021

• Simple way to initialize Vault client, including token helper support

  #4688 closed Jun 24, 2021

• Support nested LDAP groups that is not Active Directory

  #4597 closed Jun 24, 2021

• Quick Usage and Usage

  #4387 closed Jun 24, 2021

• Feature Requst: acme client support

  #4362 closed Jun 24, 2021

• Vault LDAP error authenticating

  #4359 closed Jun 24, 2021

• Feature Request: OpenPGP HTTP keyserver secret backend

  #4280 closed Jun 24, 2021

• Unable to view raw telemetry on Windows

  #4311 closed Jun 24, 2021

• scp passthrough/helper command for ssh otp

  #4217 closed Jun 24, 2021

• Create backup pgp-encrypted unseal keys at init

  #4166 closed Jun 24, 2021

• Make zookeeper storage more robust in containerized environments (2/2)

  #4161 closed Jun 24, 2021

• Make zookeeper storage more robust in containerized environments (1/2)

  #4160 closed Jun 24, 2021

• hardening: use PR_SET_DUMPABLE on Linux?

  #4150 closed Jun 24, 2021

• Feature Request: Vagrantfile

  #4130 closed Jun 24, 2021

• Docs: Separate the SSH API docs between the respective types.

  #4123 closed Jun 24, 2021

• Vault DynamoDB read spikes

  #4114 closed Jun 24, 2021

• Kubernetes authentication: is it more secure than Kubernetes secrets?

  #4095 closed Jun 24, 2021

• Identity Secrets Engine + PGP/GPG = ♥️

  #4025 closed Jun 24, 2021

• PGP encrypting secrets bound for Vault to a Vault-held key

  #3984 closed Jun 24, 2021

• Client timeout error on long running server processes

  #3898 closed Jun 24, 2021

• Support for SVIDs in the Pki Module

  #3830 closed Jun 24, 2021

• Support Okta MFA w/ Push and One Time Password

  #3732 closed Jun 24, 2021

• Limit number of policies a token issued against a role can obtain.

  #3674 closed Jun 24, 2021

• Use vault as authorization server for external services

  #3480 closed Jun 24, 2021

• Add ability to revoke all leases by role_id

  #3478 closed Jun 24, 2021

• Userpass: expirable passwords

  #3441 closed Jun 24, 2021

• Feature Request: Transit - hierarchical keys in

  #3380 closed Jun 24, 2021

• DB Plugin password generate special characters

  #3346 closed Jun 24, 2021

• /sys/auth/:path endpoint requires reading the parent endpoint for read operations

  #3148 closed Jun 24, 2021

• Issues in the windows for the Redis DB plugin Setup

  #11927 closed Jun 24, 2021

• Large mount of view keys, causing unmount issues

  #10481 closed Jun 23, 2021

• oracle database plugin vault-plugin-database-oracle_0.2.1 registration error

  #10661 closed Jun 23, 2021

• vault key value pair, policies migration from oss vault to enterprise vault

  #10744 closed Jun 23, 2021

• vault read gives different value on each read.

  #11045 closed Jun 23, 2021

• Unseal Vault with Recovery Key ( Lost AWS KMS used for Auto unseal )

  #11244 closed Jun 23, 2021

• How to properly delete kv2 secret version

  #11435 closed Jun 23, 2021

• Provide strongly-typed clients for builtin backends

  #2920 closed Jun 22, 2021

• Display_name parameter support for SecretID

  #2897 closed Jun 22, 2021

• Failing to get public keys from keybase when init of a vault

  #2846 closed Jun 22, 2021

• The auth/aws/config/sts endpoint doesn't validate the role to assume

  #2829 closed Jun 22, 2021

• 1 error occurred: failed to store SecretID: zk: node already exists

  #2791 closed Jun 22, 2021

• Feature: Transit key auto-rotate and key-limit

  #2705 closed Jun 22, 2021

• Ability to see resources list that use policy

  #2642 closed Jun 22, 2021

• Feature Request - AWS Secret Backend: Add RoleSessionName support to STS

  #2615 closed Jun 22, 2021

• Audit and server log the unseal and generate-root operations

  #2244 closed Jun 22, 2021

• Support Disjunctive Multi-Level Secret Sharing for Unsealing (in addition to Shamir's)

  #2157 closed Jun 22, 2021

• Generic webhook secret backend

  #2039 closed Jun 22, 2021

• GitHub Personal Access Tokens Secret Backend

  #1935 closed Jun 22, 2021

• Log information to integrate with SIEM tool

  #1907 closed Jun 22, 2021

• Feature: Allow adding metadata to userpass users

  #1893 closed Jun 22, 2021

• Support for listing ldap group members

  #1563 closed Jun 22, 2021

• Vault cannot create a session when configured with Consul and a remote datacenter

  #811 closed Jun 22, 2021

• Support for importing client keys protected by passphrases

  #603 closed Jun 22, 2021

• Vault operator raft remove-peer never fails & always 'Peer removed successfully!'

  #9318 closed Jun 22, 2021

• Spring config server and vault

  #11879 closed Jun 22, 2021

• Support alerts and notifications when any type of secret is expiring

  #11819 closed Jun 22, 2021

• Migration from raft to external/internal storage backend

  #11831 closed Jun 22, 2021

• Git clone crashes with 'error: invalid path 'changelog/11532 | MySQL Database UI.txt''

  #11914 closed Jun 22, 2021

10 Issues opened by 10 people

• trimmed cidrs `/32` and `/128` on `token_bound_cidrs` is breaking the terraform provider.

  #11961 opened Jun 29, 2021

• Vault do not return a new line at the end of an rfc7468 encoded certificate

  #11960 opened Jun 29, 2021

• Support new JWT token structure on k8s 1.21

  #11953 opened Jun 28, 2021

• from vault UI getting this error Make sure the policy for the path sys/capabilities-self includes capabilities = ['update'].

  #11950 opened Jun 28, 2021

• Vault considers itself healthy when can't write to audit log

  #11949 opened Jun 28, 2021

• vault agent exist unexpected with [code=killed, signal=PIPE]

  #11948 opened Jun 28, 2021

• postgresql HA backend - vault auto seals when it cannot open connection to database due to exhausted local ports

  #11936 opened Jun 24, 2021

• UI. The values ​​written in Cyrillic are not hidden

  #11926 opened Jun 23, 2021

• Templated policy with metadata does not work

  #11925 opened Jun 23, 2021

• Allow for manual database password rotation in the Web UI

  #11916 opened Jun 22, 2021

67 Unresolved conversations

Sometimes conversations happen on old items that aren’t yet closed. Here is a list of all the Issues and Pull Requests with unresolved conversations.

• Add support for ed25519

  #11780 commented on Jun 29, 2021 • 12 new comments

• transit: Support importing public key

  #4506 commented on Jun 25, 2021 • 4 new comments

• vault performance degration due to fragmented bbolt db when using raft backend

  #11072 commented on Jun 22, 2021 • 2 new comments

• Reload tls_client_ca_file on SIGHUP

  #11810 commented on Jun 29, 2021 • 2 new comments

• Improving Handling of Unix Domain Socket Addresses

  #11904 commented on Jun 28, 2021 • 2 new comments

• image: burtlo/devwebapp-ruby:k8s should use VAULT_TOKEN environment variable instead of hard coded root

  #11847 commented on Jun 22, 2021 • 1 new comment

• Refactor max_parallel bits into a shim layer that can apply to all physical backends

  #2955 commented on Jun 23, 2021 • 1 new comment

• PROXY Protocol v2 logging support

  #3807 commented on Jun 24, 2021 • 1 new comment

• Vault CLI operations sometimes hang for 5 seconds

  #4627 commented on Jun 24, 2021 • 1 new comment

• Document how to use the Go client

  #3114 commented on Jun 25, 2021 • 1 new comment

• Vault disk full failure modes

  #3725 commented on Jun 25, 2021 • 1 new comment

• Authenticating based on multiple "groupdn" values?

  #3592 commented on Jun 25, 2021 • 1 new comment

• Vault UI Support For TLS Cert Auth Method For Login

  #4689 commented on Jun 25, 2021 • 1 new comment

• Parametrize Vault Agent Configuration File.

  #6059 commented on Jun 25, 2021 • 1 new comment

• CLI: vault secrets list - add option to filter by engine type

  #6019 commented on Jun 25, 2021 • 1 new comment

• Add constraints on arbitary attributes for certificate-based authentication

  #4560 commented on Jun 25, 2021 • 1 new comment

• unseal parameter for /sys/init

  #4016 commented on Jun 25, 2021 • 1 new comment

• Version constraints between Vault and its plugins

  #3710 commented on Jun 25, 2021 • 1 new comment

• KV version 2 seems to deny request with allowed_parameter policies

  #4368 commented on Jun 25, 2021 • 1 new comment

• The required_parameters Constraint is Applied on Operations that don't Take Parameters

  #5856 commented on Jun 25, 2021 • 1 new comment

• KV Engine: Recursively list keys

  #5275 commented on Jun 25, 2021 • 1 new comment

• Feature Request: LDAP auth retry on network failure.

  #3238 commented on Jun 25, 2021 • 1 new comment

• Add SELinux enforcement

  #5267 commented on Jun 25, 2021 • 1 new comment

• Support configuring the validAfter field of SSH certificates

  #3504 commented on Jun 25, 2021 • 1 new comment

• Document how to use the ECDH encryption functions of vault agent

  #5217 commented on Jun 25, 2021 • 1 new comment

• Feature Request: Accept PGP encrypted unseal keys during unseal

  #3713 commented on Jun 25, 2021 • 1 new comment

• Telemetry tags

  #4461 commented on Jun 25, 2021 • 1 new comment

• API Docs: Multiple Kubernetes Auth Discrepancies

  #5381 commented on Jun 25, 2021 • 1 new comment

• Add command to validate config

  #3455 commented on Jun 25, 2021 • 1 new comment

• Refactor api module's logical type to be able to read kv v2

  #11853 commented on Jun 29, 2021 • 1 new comment

• Feature: CLI token list

  #11683 commented on Jun 29, 2021 • 1 new comment

• Vault as an ACME-based CA

  #8690 commented on Jun 29, 2021 • 1 new comment

• Support ServerName for database TLSConfig

  #10373 commented on Jun 29, 2021 • 1 new comment

• golang vault client always validates config vars, even if passed config struct

  #11865 commented on Jun 22, 2021 • 0 new comments

• UI: Show date of creation in version history (KV)

  #11851 commented on Jun 22, 2021 • 0 new comments

• request.tokenentry.meta should be accessible in role.template during oidc token creation

  #11803 commented on Jun 22, 2021 • 0 new comments

• Observing flakiness with oidc-token using identity.entity.aliases.<mount accessor>.metadata.<metadata key>

  #11798 commented on Jun 22, 2021 • 0 new comments

• Vault totp accept secrets with missing padding

  #11874 commented on Jun 22, 2021 • 0 new comments

• Support Config File for Vault Client

  #247 commented on Jun 22, 2021 • 0 new comments

• PostgreSQL should emit connection strings

  #317 commented on Jun 22, 2021 • 0 new comments

• Can't delete secret directories (using the generic backend)

  #1690 commented on Jun 22, 2021 • 0 new comments

• Vault configuration reload (add/remove listeners)

  #1856 commented on Jun 22, 2021 • 0 new comments

• feature request: minio secret backend

  #2274 commented on Jun 22, 2021 • 0 new comments

• aws secret backend - Validate role's arn

  #2302 commented on Jun 22, 2021 • 0 new comments

• RabbitMQ Backend - Manage secrets across multiple clients

  #2680 commented on Jun 22, 2021 • 0 new comments

• Input doesn't match output of databases connection config

  #2962 commented on Jun 22, 2021 • 0 new comments

• Support retrieving TOTP secret

  #3043 commented on Jun 23, 2021 • 0 new comments

• no response from post to /identity/entity/id/:id

  #6852 commented on Jun 24, 2021 • 0 new comments

• Proposal: Policy validator for Vault

  #2851 commented on Jun 24, 2021 • 0 new comments

• databases plugins' creds should return a 'db' attribute

  #3127 commented on Jun 24, 2021 • 0 new comments

• auth/aws: Support binding to IAM Groups

  #3214 commented on Jun 24, 2021 • 0 new comments

• PKI should honor HTTP If-Modified-Since for ./ca and ./crl requests

  #3190 commented on Jun 24, 2021 • 0 new comments

• Support for Azure Postgresql via database plugin

  #3304 commented on Jun 24, 2021 • 0 new comments

• Allow stdin input for github auth token - feature request

  #3459 commented on Jun 24, 2021 • 0 new comments

• [improvement] Add prefix_filter option for telemetry

  #3792 commented on Jun 24, 2021 • 0 new comments

• Vault as MariaDB encryption plugin -- alternative to AWS?

  #4041 commented on Jun 24, 2021 • 0 new comments

• Feature Request: Auto-renew Okta's API token

  #4571 commented on Jun 24, 2021 • 0 new comments

• vault ssh fails on Windows

  #4618 commented on Jun 24, 2021 • 0 new comments

• PKI: Get back EC parameters along with the private key

  #4637 commented on Jun 24, 2021 • 0 new comments

• support UDS (unix domain sockets) as listeners

  #5491 commented on Jun 24, 2021 • 0 new comments

• Avoid dynamic user limits with lease sharing

  #11898 commented on Jun 25, 2021 • 0 new comments

• sdk: ability to parse days, weeks, and years

  #9334 commented on Jun 23, 2021 • 0 new comments

• sdk: simplify parseutil handling of json data

  #9345 commented on Jun 23, 2021 • 0 new comments

• Fix: move DefaultTokenHelper to vault/sdk

  #9786 commented on Jun 23, 2021 • 0 new comments

• Allow setting of Consul ServiceMeta tags from config file

  #11084 commented on Jun 28, 2021 • 0 new comments

• Bug Fix: max versions not saving on KV 2

  #11908 commented on Jun 23, 2021 • 0 new comments

• Diagnose Language Pass

  #11909 commented on Jun 29, 2021 • 0 new comments