From 02c1b74551e421140e4b79f984b99b89872cb581 Mon Sep 17 00:00:00 2001 From: Dan Heath <76443935+Dan-Heath@users.noreply.github.com> Date: Wed, 5 Jul 2023 14:02:09 -0400 Subject: [PATCH] docs: Update HCP only references (#3383) --- website/content/docs/concepts/credential-management.mdx | 2 +- .../docs/concepts/domain-model/credential-libraries.mdx | 2 +- .../content/docs/concepts/domain-model/credential-stores.mdx | 2 +- website/content/docs/concepts/filtering/worker-tags.mdx | 4 ++-- 4 files changed, 5 insertions(+), 5 deletions(-) diff --git a/website/content/docs/concepts/credential-management.mdx b/website/content/docs/concepts/credential-management.mdx index 0d83e92e0..4c650bfd0 100644 --- a/website/content/docs/concepts/credential-management.mdx +++ b/website/content/docs/concepts/credential-management.mdx @@ -65,7 +65,7 @@ Learn more about [credential brokering](/boundary/tutorials/hcp-getting-started/ Learn more about the [Vault dynamic secrets engine](/vault/docs/secrets). -## Credential injection HCP only +## Credential injection HCP/ENT Credential injection is the process by which a credential is fetched from a credential store and then passed on to a worker for authentication to a remote machine. With credential injection, the user never sees the credential required to authenticate to the target. diff --git a/website/content/docs/concepts/domain-model/credential-libraries.mdx b/website/content/docs/concepts/domain-model/credential-libraries.mdx index baab3e559..af294edbd 100644 --- a/website/content/docs/concepts/domain-model/credential-libraries.mdx +++ b/website/content/docs/concepts/domain-model/credential-libraries.mdx @@ -30,7 +30,7 @@ The default value is `GET`. - `http_request_body` - (optional) The body of the HTTP request the library sends to Vault when requesting credentials. Only valid if `http_method` is set to `POST`. -### Vault SSH certificate credential library attributes HCP only +### Vault SSH certificate credential library attributes HCP/ENT As of Boundary 0.12.0, you can configure SSH credential injection using [Vault's SSH secrets engine](/vault/docs/secrets/ssh) to create the SSH certificate credentials. SSH certificate-based authentication extends key-based authentication using digital signatures. diff --git a/website/content/docs/concepts/domain-model/credential-stores.mdx b/website/content/docs/concepts/domain-model/credential-stores.mdx index be097c1b5..c1b2f74fa 100644 --- a/website/content/docs/concepts/domain-model/credential-stores.mdx +++ b/website/content/docs/concepts/domain-model/credential-stores.mdx @@ -58,7 +58,7 @@ A Vault credential store has the following additional attributes: - `namespace` - (optional) A Vault [namespace][]. Requires Vault Enterprise. -- `worker_filter` HCP Only - (optional) +- `worker_filter` HCP/ENT - (optional) A [filter] used to control which [PKI workers] can handle Vault requests. This allows the use of private Vault instances with Boundary. PKI workers deployed in the same network as a private Vault instance can access and relay diff --git a/website/content/docs/concepts/filtering/worker-tags.mdx b/website/content/docs/concepts/filtering/worker-tags.mdx index c0eacaf96..70b3778fc 100644 --- a/website/content/docs/concepts/filtering/worker-tags.mdx +++ b/website/content/docs/concepts/filtering/worker-tags.mdx @@ -144,11 +144,11 @@ when you configure [targets](/boundary/docs/concepts/domain-model/targets). The `egress_worker_filter` attribute controls which workers are used for egress to a target. This is the worker that accesses the target. -The `ingress_worker_filter`HCP Only attribute controls which workers are used for ingress to a target. +The `ingress_worker_filter`HCP/ENT attribute controls which workers are used for ingress to a target. This is the worker a client connects to when initiating a connection to a target. -# Vault worker filtering HCP only +# Vault worker filtering HCP/ENT Tags are used to control which [PKI workers] can manage Vault requests by specifying a `worker_filter`attribute when configuring [credential stores].