Cloudron makes it easy to run web apps like WordPress, Nextcloud, GitLab on your server. Find out more or install now.


Skip to content

Vault

4 Topics 90 Posts
  • Vault - Package Updates

    Pinned
    75
    0 Votes
    75 Posts
    8k Views
    Package UpdatesP

    [1.16.2]

    Update vault to 1.18.2 Full Changelog raft/snapshotagent (enterprise): upgrade raft-snapshotagent to v0.0.0-20241115202008-166203013d8e auth/azure: Update plugin to v0.19.2 [GH-28848] core/ha (enterprise): Failed attempts to become a performance standby node are now using an exponential backoff instead of a login (enterprise): Return a 500 error during logins when performance standby nodes make failed gRPC requests to the active node. [GH-28807] Product Usage Reporting: Added product usage reporting, which collects anonymous, numerical, non-sensitive data about Vault secrets usage, and adds it to the existing utilization reports. See the [docs] for more info [GH-28858] secret/pki: Introduce a new value always_enforce_err within leaf_not_after_behavior to force the error in all circumstances such as CA issuance and ACME requests if requested TTL values are beyond the issuer's NotAfter. [GH-28907] secrets-sync (enterprise): No longer attempt to unsync a random UUID secret name in GCP upon destination creation. ui: Adds navigation for LDAP hierarchical roles [GH-28824] website/docs: changed outdated reference to consul-helm repository to consul-k8s repository. [GH-28825] auth/ldap: Fixed an issue where debug level logging was not emitted. [GH-28881] core: Improved an internal helper function that sanitizes paths by adding a check for leading backslashes secret/pki: Fix a bug that prevents PKI issuer field enable_aia_url_templating secrets-sync (enterprise): Fixed issue where secret-key granularity destinations could sometimes cause a panic when loading a sync status. secrets/aws: Fix issue with static credentials not rotating after restart or leadership change. [GH-28775] secrets/ssh: Return the flag allow_empty_principals in the read role api when key_type is "ca" [GH-28901] secrets/transform (enterprise): Fix nil panic when accessing a partially setup database store. secrets/transit: Fix a race in which responses from the key update api could contain results from another subsequent update [GH-28839] ui: Fixes rendering issues of LDAP dynamic and static roles with the same name [GH-28824]
  • Vault - OIDC Support

    2
    0 Votes
    2 Posts
    224 Views
    girishG

    Also, because of the recent licensing changes in all of Hashicorp's products, Vault has been forked as OpenBao.

    https://github.com/openbao/openbao/tree/development

  • Vaultwarden vs Vault

    8
    1 Votes
    8 Posts
    3k Views
    marcusquinnM

    @scooke Think of Vault as kinda like Bitwarden but for code to lookup with. Unless you're coding access to things, I don't think you'd need it.

  • Vault process running out of memory--plenty of memory available.

    Moved
    5
    0 Votes
    5 Posts
    955 Views
    girishG

    @mastadamus I will bump up the memory limit for vault. https://learn.hashicorp.com/tutorials/vault/reference-architecture says 4-8GB is recommended. Currently, the cloudron package runs at 256MB!

    Also, as you guessed, it's only the vault container that is dying and the server is not affected (I guess that's one of the main benefits of running in containers, a single app cannot bring down a system).