Is your feature request related to a problem? Please describe. This is only a minor annoyance. Since moving to Vault 1.12.2, when an application is is in the middle of authenticating against the Vault OIDC provider, a set of menu options is now displayed on the right hand side: This is only visible...

When working with vaults API, I observed a weird behavior with certain endpoints. Meanwhile, client.Sys().Health() works as expected, client.Logical().Read("sys/health") responds no data. On the other hand, client.Logical().Read("sys/ha-status") works as expected. Are certain endpoints different in...

Describe the bug Deregistering a plugin that has either been corrupted, removed, overwritten fails.... It seems there either ought to be a --force option for deregister or it should succeed at being removed. To Reproduce Steps to reproduce the behavior: Manually delete a plugin from the plugin fol...

Plugin support currently requires us to build and bundle a specific version of Vault instead of using a stock Vault version. This intermediate artifact or layer of indirection has several drawbacks: Security tools don't identify this as official releases and thus don't identify CVEs and propose cri...

👋 Currently, there is no support for interacting with PKI secret engines using the vault api golang package. Is this something that is already planned?

In order to maintain the configuration without including any sensitive data in it, I am trying to specify the s3 credentials using the environment variables AWS_ACCESS_KEY_ID and AWS_SECRET_ACCESS_KEY Example s3 configuration storage "s3" { bucket = "vault" endpoint = "https://fra1.digitaloc...

Describe the bug On the Azure egine, when you vault read azure/creds/vault-app you get the error: Error reading azure/creds/vault-app: Get "https://my.vault.domain/v1/azure/creds/vault-app": EOF In Audit.log: 1 error occurred: * error while assigning roles: retry failed: context canceled So,...

Is your feature request related to a problem? Please describe. Secrets engines that generate dynamic credentials on request are extremely useful. This is evidenced by the AWS, Azure and other secret engines available in Vault. It would be really nice to also have an Oracle Cloud Infrastructure (OCI)...

Describe the bug If the audit file fills, Vault will eventually stall preventing any access. To Reproduce Steps to reproduce the behavior: Enable audit file: https://developer.hashicorp.com/vault/docs/audit/file Allow audit file to fill Attempt to authenticate and retrieve values Expected behavio...

Hi, I need to programatically remove raft nodes. I've been using the go sdk but noticed some of the raft endpoints are missing such as /sys/storage/raft/remove-peer. Is it possible to add these in? I could use the raw request method but that has a notice saying its being depreciated. Thanks!