65 Commits (c2bc19c71fac7c3ccf106b3cdf0c19fb7ecf899d)

Author	SHA1	Message	Date
Irena Rindos	fd8f0c1cc6	chore(docs): Remove community-only notation for KMS keys (#5164) ... * chore(docs): Remove community-only tag from kms keys * docs: Clarify edition support * docs: Minor edit, add `worker-auth` statement --------- Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>	1 year ago
Dan Heath	22a9074724	docs: Update meta content - Concepts (#5224) ... * docs: Update meta content - Concepts * docs: Revisions * Update website/content/docs/concepts/domain-model/credentials.mdx Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com> * Update website/content/docs/concepts/domain-model/scopes.mdx Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com> * docs: Update exec flag description * Update website/content/docs/concepts/filtering/events.mdx Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com> * docs: Update domain model descriptions * docs: Update domain model titles * docs: Edits for consistency --------- Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com>	1 year ago
Dan Heath	bbbe971ed1	docs: Move permissions to config for usage docs (#4962) ... * docs: Move permissions to config for usage docs * docs: Update permissions concepts (#4970) * docs: Update permissions concepts * docs: Delete comments * docs: Structural edits and adding workflow * docs: Fix wording * docs: Change guide name, add resource table * Rab manage roles refactor (#4980) * refreshes the manage-roles docs * adds href for common-workflows/manage-roles to configuration/identity-access-management * docs: Fix a couple typos * docs: Style updates * docs: Fix image links, update alt text * docs: Add more info/next steps sections * docs: Remove number for single instruction * fixes screenshot --------- Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com> * updates path to resource-table.mdx * sets aliases scope to Global * updates aliases scope in resource table * clarifies assigned scope id * Update website/redirects.js Co-authored-by: Michael Li <michael.li@hashicorp.com> --------- Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com> Co-authored-by: Robin Beck <stellarsquall@protonmail.ch> Co-authored-by: Michael Li <michael.li@hashicorp.com>	2 years ago
Dan Heath	d4e9bc02ae	docs: Update roles in permissions concept (#4958) ... * docs: Update roles in permissions concept * docs: Revise intro paragraph	2 years ago
Irena Rindos	7e36f32e52	update tls docs to include controller led (#4905) ... * update tls docs to include controller led * docs: Minor style edits * docs: Minor edits --------- Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>	2 years ago
Todd	5a06e4fe66	Auto generate the permissions pages. (#4786) ... * Auto generate the permissions pages. * Add add- set- remove- auto descriptions. Hide scope line when no scope provided * Document the resource info struct	2 years ago
Adam Bouhmad	50de448fee	Merge PKI & KMS docs (#4325) ... * Merge PKI & KMS docs * Update worker-configuration.mdx remove deprecated kms flag * docs: Fix TOC * docs: Create redirects * docs: Fix some broken links * modify overview page for post 0.15 changes * Modify data-encryption docs for post 0.15 * modify configure-workers page for post 0.15 --------- Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>	2 years ago
Michael Li	95ad3eab48	docs: Update resource table format (#3432)	2 years ago
Louis Ruch	7921ce22fd	test(grant): Use ID to validate version check (#4274) ... * test(grant): Use ID to validate version check * Update docs from id to ids * Remove 'id' in 0.16.0	2 years ago
Jeff Mitchell	253d79116c	Swap id field in grants to ids since that's now standardized (#4250) ... * Swap id field in grants to ids since that's now standardized * Fix some tests I missed * Update generated resource table	2 years ago
Louis Ruch	f26243e9af	feat(recording): Delete Session Recording	2 years ago
Damian Debkowski	b7739cd214	chore: generated files	2 years ago
Dan Heath	22e06eddc8	docs: Add enterprise badge (#3981) ... * docs: Add enterprise badge * docs: Add heading-level enterprise alert * docs: Add some missing tags	2 years ago
Dan Heath	de813c9af9	docs: Update oss references (#3588)	3 years ago
Dan Heath	3f4cd53d16	docs: Update headings for new style rule (#3396) ... * docs: Update headings for new style rule * docs: Fix headings - Get started * docs: Fix headings - Install * docs: Fix headings - Concepts * docs: Fix typos * docs: Fix headings - Configuration * docs: Fix headings - Operations * docs: Fix headings - Troubleshoot * docs: Fix headings - Clients and Develop * docs: Fix headings - HCP and ENT * docs: Fix headings - Release notes * docs: Fix typos * docs: Fix capitalization in TOC	3 years ago
Dan Heath	8acc73dc6e	docs: Add bsr key to requirements (#3330) ... * docs: Add bsr key to requirements * docs: Rewrite for clarity * docs: Add bsr key definition to security page	3 years ago
Robin Beck	2179af63cb	Hashidays Docs (#3313) ... docs: add 0.13 feature docs --------- Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com> Co-authored-by: Jeff Malnick <malnick@gmail.com> Co-authored-by: Michael Li <michael.li@hashicorp.com> Co-authored-by: Irena Rindos <irenarindos@users.noreply.github.com> Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com> Co-authored-by: XingLu Wang <95828202+xingluw@users.noreply.github.com> Co-authored-by: Jeff Mitchell <jeffrey.mitchell@gmail.com>	3 years ago
XingLu Wang	4fc872fc15	Restructuring and addition to permissions docs (#3270) ... * docs: Create grants topic * Update grants * Restructuring of permissions docs * Fixing links Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com> * Update website/content/docs/concepts/security/permissions/index.mdx * Update website/content/docs/concepts/security/permissions/index.mdx * Update website/content/docs/concepts/security/permissions/advanced.mdx * Apply suggestions from code review Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com> * Apply suggestions from code review Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com> * Apply suggestions from code review Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com> * docs: Add redirect for deleted file --------- Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>	3 years ago
Johan Brandhorst-Satzkorn	97977f1995	update perms table for session recordings and storage buckets (#3253)	3 years ago
XingLu Wang	9d50db4c44	doc: Fix typo (#3185)	3 years ago
Ashlee M Boyer	e6be6431b2	docs: Migrate link formats (#2777) ... * Adding docs-content-check-legacy-links-format workflow * Adding test-link-rewrites workflow * Migrating links to new format	3 years ago
Johan Brandhorst-Satzkorn	240278cbf1	fix(docs): Use "root" to reference the root key (#2700) ... The "root" identifier is how we identify the root key in configuration, so it is the phrase we should use in this documentation.	3 years ago
Johan Brandhorst-Satzkorn	6d25b35b4e	Add KMS rotation/destruction feature to the changelog and docs (#2600) ... * Add initial changelog entry * feat(docs): Add initial stab at docs for KMS rotation/destruction * fixup! Add initial changelog entry * Review comments	3 years ago
Johan Brandhorst-Satzkorn	df02501dcc	Create new "previous-root" key purpose for root key migrations (#2639) (#2648) ... * Update go-kms-wrapping dependency * Apply changes suggested by Jeff * Fix listener test * Add note about config fix to CHANGELOG * Review comments Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com> Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>	3 years ago
Jeff Mitchell	cede1aec93	Add initial templating support to Vault credential libraries (#2569) (#2575) ... Add initial templating support to Vault credential libraries This adds support for templating various account and user values into Vault dynamic credential library POST bodies and GET/POST paths. It also unifies how parameters are used in grants, with backwards compatibility.	3 years ago
Jeff Mitchell	53b5e532d5	Remove deprecated methods/fields on targets (#2393)	4 years ago
Jeff Mitchell	01fb949d0b	Add controller-led worker auth flow (#2413) ... This adds an action to the API that allows pulling out an activation token that can be given to a worker in its config (directly or via env or file). The worker can pass this along with its normal request in place of its normal nonce and the server will automatically accept it. Co-authored-by: Irena Rindos <irenarindos@users.noreply.github.com>	4 years ago
Jeff Mitchell	30ede3b137	Fix various website issues (#2344) ... I found some invalid links and some missing KMS information; this fixes those.	4 years ago
Loann Le	d5633952db	Boundary documentation: content cleanup in prep for devdot migration (#2249) ... * cleaning up docs * Update website/content/docs/concepts/domain-model/groups.mdx Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com> * Update website/content/docs/concepts/domain-model/managed-groups.mdx Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com> * Update website/content/docs/concepts/domain-model/roles.mdx Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com> * Update website/content/docs/concepts/domain-model/scopes.mdx Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com> * Update website/content/docs/concepts/domain-model/sessions.mdx Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com> * Update website/content/docs/configuration/worker/pki-worker.mdx Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com> * Update website/content/docs/getting-started/deploy-and-login.mdx Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com> Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com>	4 years ago
Jeff Mitchell	79440c5d82	Add worker resource to perms table (#2241)	4 years ago
Robin Beck	c05fa66096	Hashiconf docs changes (#2178) ... Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com> Co-authored-by: XingLu Wang <95828202+xingluw@users.noreply.github.com> Co-authored-by: Loann Le <84412881+taoism4504@users.noreply.github.com> Co-authored-by: Jeff Mitchell <jeffrey.mitchell@gmail.com> Co-authored-by: irenarindos <irena.rindos@gmail.com> Co-authored-by: Irena Rindos <irenarindos@users.noreply.github.com> Co-authored-by: Louis Ruch <louisruch@gmail.com> Co-authored-by: XingLu Wang <xinglu.wang@hashicorp.com> Co-authored-by: XingLu Wang <95828202+xingluw@users.noreply.github.com>	4 years ago
Jeff Mitchell	d6362f9e5e	Restrict anonymous user capabilities (#2156)	4 years ago
Irena Rindos	bc6689fb16	docs(permissions): break permissions into sections (#1893) ... * docs(permissions): break permissions into sections * fixup! docs(permissions): break permissions into sections	4 years ago
Jeff Mitchell	7174a91f32	Update data-encryption documentation to clarify what is encrypted (#1722)	4 years ago
Jeff Mitchell	1782f6a4e4	Enhance worker connection security (#1641) ... This stores worker connection nonces within the database to ensure uniqueness of connections. Prior the connection required any attacker to be able to decrypt the incoming encrypted authentication message in order to replay (and if the attacker has access to the KMS you have bigger problems), but with this change even if an attacker does have access to the KMS key, they cannot reuse the same message. (If they're able to encrypt against the KMS key, they can still act as a worker with a new message, so this only really helps if they only have decryption capabilities.)	4 years ago
Todd Knight	39cc245966	Make gen after make tools. Includes make fmt of existing non generated files. (#1438)	5 years ago
Carlos Alcaide Corvo	aea1da77b6	Bump @types/node to latest release of v15 (#1296) ... * Bump @types/node to latest release of v14 * Bump major version to v15	5 years ago
Jim Lambert	aa41676dc9	make gen changes prior to staging release	5 years ago
Jeff Mitchell	179a49657e	Managed Groups service (#1262)	5 years ago
Jeff Mitchell	22d5c88a0b	Add Output Fields support (#1192)	5 years ago
Jeff Mitchell	727d1c7085	Add "no-op" action and use it as default for scope permissions (#1138) ... Because of listing visibility, if no actions are assigned to a user for an individual resource, it's excluded from the list. This is fine and good. However, when we made a change in 0.2.0 to restrict the information returned from listing for the anonymous user for scopes and auth methods, it exposed the fact that because of the way this visibility works we had to add `read` to scopes by default -- thereby rather defeating the purpose of restricting what goes back to `u_anon` requests. The purpose of "no-op" is to never be used for real actions within the API, but as something that can be granted to specifically enable visibility for the targeted user. This makes the controls over list visibility much more granular.	5 years ago
Jim	24dd92f3f9	update fmt formatting. (#1113)	5 years ago
Todd Knight	14c222709c	Make oidc auth callback redirect on most errors (#1105)	5 years ago
Jeff Mitchell	90b30bad25	Use 202 for token polling endpoint instead of 204 (#1103)	5 years ago
Jim	dd0f34bc35	Add new OIDC auth method. (#1090) ... Co-authored-by: Todd Knight <T.Alan.Knight@gmail.com> Co-authored-by: Jeff Mitchell <jeffrey.mitchell@gmail.com> Co-authored-by: Michael Gaffney <mgaffney@users.noreply.github.com>	5 years ago
John Reese	c096157cf9	Fix spelling errors found in the documentation (#1073)	5 years ago
Bryce Kalow	bd8cc5464e	feat(website): migrates nav data format and updates docs pages (#1049) ... * migrates nav data format and updates docs pages * removes sidebar_title from content files * updates api docs to work with new format	5 years ago
Jeff Mitchell	6605b4c9f8	Revamp authenticate (#1025)	5 years ago
Jeff Mitchell	888e0c88a9	Slight website wordsmithing	5 years ago
Jeff Mitchell	341e7aff0d	CLI Generation (#953)	5 years ago