Update token/clientKey on hmac change (#125)

* Update token/clientKey on hmac change

* Update changelog

* Update docs

docs/resources/credential_library_vault.md

@@ -31,8 +31,8 @@ resource "boundary_scope" "project" {
 resource "boundary_credential_store_vault" "foo" {
   name        = "foo"
   description = "My first Vault credential store!"
-  address     = "127.0.0.1"
-  token       = "s.0ufRo6XEGU2jOqnIr7OlFYP5"
+  address     = "http://127.0.0.1:8200"      # change to Vault address
+  token       = "s.0ufRo6XEGU2jOqnIr7OlFYP5" # change to valid Vault token
   scope_id    = boundary_scope.project.id
 }
 
@@ -40,7 +40,7 @@ resource "boundary_credential_library_vault" "foo" {
   name                = "foo"
   description         = "My first Vault credential library!"
   credential_store_id = boundary_credential_store_vault.foo.id
-  path          = "my/secret/foo"
+  path                = "my/secret/foo" # change to Vault backend path
   http_method         = "GET"
 }
 
@@ -48,7 +48,7 @@ resource "boundary_credential_library_vault" "bar" {
   name                = "bar"
   description         = "My second Vault credential library!"
   credential_store_id = boundary_credential_store_vault.foo.id
-  path          = "my/secret/bar"
+  path                = "my/secret/bar"  # change to Vault backend path
   http_method         = "POST"
   request_body        = <<EOT
 {
@@ -64,13 +64,13 @@ EOT
 ### Required
 
 - **credential_store_id** (String) The ID of the credential store that this library belongs to.
-- **path** (String) The Vault path to query
+- **path** (String) The path in Vault to request credentials from.
 
 ### Optional
 
 - **description** (String) The Vault credential library description.
-- **http_method** (String) The HTTP method to use when contacting Vault
-- **http_request_body** (String) The raw string to use in HTTP request to Vault
+- **http_method** (String) The HTTP method the library uses when requesting credentials from Vault. Defaults to 'GET'
+- **http_request_body** (String) The body of the HTTP request the library sends to Vault when requesting credentials. Only valid if `http_method` is set to `POST`.
 - **name** (String) The Vault credential library name. Defaults to the resource name.
 
 ### Read-Only

docs/resources/credential_store_vault.md

@@ -31,8 +31,8 @@ resource "boundary_scope" "project" {
 resource "boundary_credential_store_vault" "example" {
   name        = "foo"
   description = "My first Vault credential store!"
-  address     = "127.0.0.1"
-  token       = "s.0ufRo6XEGU2jOqnIr7OlFYP5"
+  address     = "http://127.0.0.1:8200"       # change to Vault address
+  token       = "s.0ufRo6XEGU2jOqnIr7OlFYP5"  # change to valid Vault token
   scope_id    = boundary_scope.project.id
 }
 ```
@@ -42,26 +42,26 @@ resource "boundary_credential_store_vault" "example" {
 
 ### Required
 
-- **address** (String) The address to Vault server
-- **scope_id** (String) The scope for this credential store
-- **token** (String, Sensitive) The Vault token
+- **address** (String) The address to Vault server. This should be a complete URL such as 'https://127.0.0.1:8200'
+- **scope_id** (String) The scope for this credential store.
+- **token** (String, Sensitive) A token used for accessing Vault.
 
 ### Optional
 
-- **ca_cert** (String) The Vault CA certificate to use
-- **client_certificate** (String) The Vault client certificate
-- **client_certificate_key** (String, Sensitive) The Vault client certificate key
+- **ca_cert** (String) A PEM-encoded CA certificate to verify the Vault server's TLS certificate.
+- **client_certificate** (String) A PEM-encoded client certificate to use for TLS authentication to the Vault server.
+- **client_certificate_key** (String, Sensitive) A PEM-encoded private key matching the client certificate from 'client_certificate'.
 - **description** (String) The Vault credential store description.
 - **name** (String) The Vault credential store name. Defaults to the resource name.
-- **namespace** (String) The namespace within Vault to use
-- **tls_server_name** (String) The Vault TLS server name
-- **tls_skip_verify** (Boolean) Whether or not to skip TLS verification
+- **namespace** (String) The namespace within Vault to use.
+- **tls_server_name** (String) Name to use as the SNI host when connecting to Vault via TLS.
+- **tls_skip_verify** (Boolean) Whether or not to skip TLS verification.
 
 ### Read-Only
 
-- **client_certificate_key_hmac** (String) The Vault client certificate key hmac
+- **client_certificate_key_hmac** (String) The Vault client certificate key hmac.
 - **id** (String) The ID of the Vault credential store.
-- **token_hmac** (String) The Vault token hmac
+- **token_hmac** (String) The Vault token hmac.
 
 ## Import
 

docs/resources/target.md

@@ -36,16 +36,16 @@ resource "boundary_scope" "project" {
 resource "boundary_credential_store_vault" "foo" {
   name        = "vault_store"
   description = "My first Vault credential store!"
-  address     = "http://localhost:55001"
-  token       = "s.0ufRo6XEGU2jOqnIr7OlFYP5"
+  address     = "http://127.0.0.1:8200"       # change to Vault address
+  token       = "s.0ufRo6XEGU2jOqnIr7OlFYP5"  # change to valid Vault token
   scope_id    = boundary_scope.project.id
 }
 
 resource "boundary_credential_library_vault" "foo" {
-  name                = "vault_library"
+  name                = "foo"
   description         = "My first Vault credential library!"
   credential_store_id = boundary_credential_store_vault.foo.id
-  path          = "database/creds/opened"
+  path                = "my/secret/foo" # change to Vault backend path
   http_method         = "GET"
 }
 
@@ -88,7 +88,7 @@ resource "boundary_target" "foo" {
   host_set_ids = [
     boundary_host_set.foo.id
   ]
-  credential_library_ids = [
+  application_credential_library_ids = [
     boundary_credential_library_vault.foo.id
   ]
 }
@@ -104,7 +104,7 @@ resource "boundary_target" "foo" {
 
 ### Optional
 
-- **credential_library_ids** (Set of String) A list of credential library ID's.
+- **application_credential_library_ids** (Set of String) A list of application credential library ID's.
 - **default_port** (Number) The default port for this target.
 - **description** (String) The target description.
 - **host_set_ids** (Set of String) A list of host set ID's.