* docs: Add S3 compliant storage
* docs: remote storage state (#4949)
* docs: remote storage state
document new remote storage state on the worker
* docs: Add link on worker storage page
* docs: Address feedback
* docs: Call out example
* docs: Fix a typo
* Update website/content/docs/configuration/session-recording/create-storage-bucket.mdx
Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com>
* Apply batch of suggestions from code review
Co-authored-by: Hugo <10965479+hugoghx@users.noreply.github.com>
* docs: Clarify support statement
* docs: Revise support statement
---------
Co-authored-by: Elim Tsiagbey <elim.tsiagbey@hashicorp.com>
Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com>
Co-authored-by: Hugo <10965479+hugoghx@users.noreply.github.com>
* added sample terraform code to create storage bucket configuration
* added terraform sample code for target configuration
* Added HCP Boundary Plus as requirement in the note
* added sample TF code to configure a storage policy
* added group attributes to tabs
* added terraform tab for updating a storage policy
* formatting and style guide changes
* docs: Lowercase credential types
* docs: Apply active voice
* docs: Close prefix
---------
Co-authored-by: Robin Beck <stellarsquall@protonmail.ch>
Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>
* docs: Add bsr purpose key examples
* Apply batch of suggestions from code review
Co-authored-by: Michael Li <michael.li@hashicorp.com>
---------
Co-authored-by: Michael Li <michael.li@hashicorp.com>
* add a new cred management files
* adding credential management files
* fixed type-os, added ent labels, grouped cli/ui
* added reference links from concepts section and Vault integration section to new cred management pages
* style guide and formatting enhancements
* style guide and formatting enhancements
* fixes internal link
* docs: Updates for styles and standards
* docs: Fix link structure
* docs: Break out brokering/injection procedures
* Apply batch suggestions from code review
Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com>
* docs: Clean up commented out code
* docs: Rename index file per best practices
* docs: Update page description meta content
* docs: Add level 2 headings for organization
---------
Co-authored-by: Robin Beck <stellarsquall@protonmail.ch>
Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>
Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com>
The max_page_size variable lets operators control the size of the
pagination pages. This value configures both the maximum permitted
page size and the default page size when none is explicitly provided.
Operators can tweak this option up or down to increase or reduce
the load on the database during pagination.
* docs: Document API rate limiting
* docs: Fix default setting
* addss rate limiting examples to complete configuration example
* use # for comments for consistency
* Update website/content/docs/api-clients/api.mdx
Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com>
* Apply batch suggestions from code review
Co-authored-by: Michael Li <michael.li@hashicorp.com>
* docs: Updates from review feedback
* docs: Updates from review feedback
* docs: Add new defaults and sub-headings
* Update website/content/docs/api-clients/go-sdk.mdx
Co-authored-by: Timothy Messier <tim.messier@gmail.com>
* docs: Remove remaining comments from code blocks
* docs: Update code blocks
* fixes tabs
* Update website/content/docs/api-clients/api.mdx
Co-authored-by: Michael Li <michael.li@hashicorp.com>
---------
Co-authored-by: stellarsquall <stellarsquall@protonmail.ch>
Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com>
Co-authored-by: Michael Li <michael.li@hashicorp.com>
Co-authored-by: Timothy Messier <tim.messier@gmail.com>
* docs: enable session recording on a target
* docs: Minor copy edit to make sentence singular
---------
Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>
This adds a new mechanism for worker authentication that uses the
third-party arbitration of the original KMS flow by leveraging
recently-added capabilities in nodeenrollment to support a registration
wrapper. This allows for workers to be registered to the system with
just a name and a matching wrapper, while at the same time allowing
these workers to be used for private Vault access and multi-hop as they
contain per-worker encryption keys and support rotation.
Nodes using this mode will generate and rotate credentials in-memory
(using another recently added nodeenrollment capability) so will have a
new set of keys on every startup. This has the side effect of ensuring
that there is never a conflict or re-use of these credentials.
Note that the normal test worker flow was using the now-deprecated KMS
method; there is still a test that uses this (explicitly) but all other
tests using test workers that did not specify a specific PKI flow now
actually use this mechanism. This means there is fairly decent test
coverage in a general sense, plus the specific tests updated/added for
this feature.
This also adds a new KMS type that can be used to have
distinct KMSes for upstream authentication vs. accepting from
downstream.
Irena Rindos
Casey Trahan
Damian Debkowski
Yong Zhang
Adam BouhmadandDan Heath
Johan Brandhorst-Satzkorn
Jeff Mitchell
Michael MiltonandDan Heath
Dharini JeevaandDan Heath
edorionandDan Heath
